Accountability Firewall Security Defenses VPN 
eSecurity Planet
JANUARY 16, 2024
Keep an eye out for security announcements from your firewall vendors; it’s possible additional similar vulnerabilities will come to light. The problem: Juniper Networks released a bulletin about a remote code execution vulnerability in its SRX firewalls and EX switches. This vulnerability is tracked as CVE-2024-21591.
eSecurity Planet
APRIL 30, 2024
Setting up a firewall is the first step in securing your network. A successful firewall setup and deployment requires careful design, implementation, and maintenance to effectively improve your network integrity and data security. Verify that the chosen firewall can meet your security standards and functions.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
eSecurity Planet
APRIL 15, 2024
Threats range from severe weaknesses in Ivanti’s VPN appliances to zero-day exploits in popular software such as Palo Alto Networks’ PAN-OS and Telegram’s Windows client. Typically, these vulnerabilities result in remote code execution or denial-of-service attacks, posing major dangers to users’ data security.
eSecurity Planet
AUGUST 28, 2023
An attacker creates a new admin user and logs into an OpenFire account. August 24, 2023 Akira ransomware targeting Cisco, but MFA helps Akira ransomware groups have been exploiting Cisco’s virtual private network ( VPN ) tools. This highlights the importance of enabling multi-factor authentication (MFA) in VPN implementations.”
eSecurity Planet
AUGUST 28, 2023
An attacker creates a new admin user and logs into an OpenFire account. August 24, 2023 Akira ransomware targeting Cisco, but MFA helps Akira ransomware groups have been exploiting Cisco’s virtual private network ( VPN ) tools. This highlights the importance of enabling multi-factor authentication (MFA) in VPN implementations.”
eSecurity Planet
SEPTEMBER 5, 2023
Unpatched devices can give attackers privileged access to networks, particularly those set up as VPN virtual servers, ICA proxies, RDP proxies, or AAA servers. This major security weakness can allow unauthenticated attackers to execute code on vulnerable devices through the Internet-exposed J-Web configuration interface.
eSecurity Planet
JANUARY 22, 2024
The authenticated user must also be logged into an account on an instance of GHES. To exploit CVE-2023-6549, an attacker must find an appliance that’s configured as a gateway, such as a VPN virtual server, or it must be configured as an AAA virtual server. GitHub has already rotated the credentials for these issues.
Expert insights. Personalized for you.
108 
Let's personalize your content