article thumbnail

VulnRecap 2/19/2024: News from Microsoft, Zoom, SolarWinds

eSecurity Planet

The problem: Researchers at cybersecurity company Truesec uncovered data that indicated Akira ransomware might be exploiting an old vulnerability within Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). The vulnerability, CVE-2020-3259 , was first discovered in May 2020. Enabling logging.

VPN 111
article thumbnail

Preventing the Spread of Ransomware

Security Boulevard

For most of the world, 2020 was devastating, a year mired in multiple crises. But in at least one industry, 2020 was a banner year! Most companies were unprepared to secure an entirely remote workforce, relying on remote desktop protocol (RDP) and strained VPN infrastructures, leaving workers ripe for attack.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

What is SASE? Secure Access Service Service Edge Explained

eSecurity Planet

SASE provides an edge security solution that addresses these challenges without the bottlenecks of traditional virtual private network (VPN) solutions. Bottom Line: Implement SASE to Improve Security and Operations Sprawling organizations with many cloud-based or remote resources will greatly benefit by adopting SASE solutions.

Firewall 103
article thumbnail

APT trends report Q1 2021

SecureList

One of the suspected FinFly Web servers was active for more than a year between October 2019 and December 2020. As it turned out, it was active for a very short time around September 2020 on a host that appears to have been impersonating the popular Mail.ru The activities peaked in November 2020, but are still ongoing.

Malware 142
article thumbnail

Cloudflare One SASE Review & Features 2023

eSecurity Planet

Cloudflare One Cloudflare released their initial SASE offering in October 2020 and continues to add features and capabilities. As companies grow, the strong capabilities of Cloudflare’s higher tiers will facilitate future growth and expansion without compromising security or SASE capabilities.

DNS 98
article thumbnail

Black Hat USA 2021 – Top 5 Sessions to Attend & Tips to Survive Now that Conferences are Back In-Person

Security Boulevard

In 2020, the global pandemic dramatically changed our social environment, and both Black Hat and Defcon went virtual with in-person networking and parties placed on hold. Tom Tervoort | Principal Security Specialist, Secura. James Coote | Senior Consultant, F-Secure Consulting. Tracks : Network Security, Defense.

CISO 40
article thumbnail

2024 State of Cybersecurity: Reports of More Threats & Prioritization Issues

eSecurity Planet

553% increase in DNS Flood attacks from 1H 2020 to 2H 2023. CrowdStrike: Observes the top attack vector in 2023 and predicts 2024’s targets: Unmanaged network appliances (edge gateway, firewall, virtual private network/VPN) remain the most observed initial access vector exploited in 2023. 20,551 gambling industry attacks.