Security Affairs

JULY 22, 2023

Fortinet FortiGuard Labs researchers warned of multiple DDoS botnets exploiting a vulnerability impacting multiple Zyxel firewalls. The cause of the vulnerability is the improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35.

DDOS 93

DDOS Firmware VPN Firewall 93

Security Affairs

SEPTEMBER 4, 2019

The first issue is an information disclosure flaw via unauthenticated external DNS requests that affect Zyxel devices from the USG, UAG, ATP, VPN and NXC series. This FTP server can be accessed with hardcoded credentials that are embedded in the firmware of the AP. ” reads the advisory. Pierluigi Paganini.

DNS 77

DNS Hacking Firmware Wireless 77

Security Affairs

APRIL 25, 2019

Rockwell has released firmware updates that address the vulnerability for the affected controllers. Below the recommendations published by Rockwell Automation to minimize the risk of exploitation of this vulnerability: Update to the latest available firmware revision that addresses the associated risk. Pierluigi Paganini.

Firmware 72

Firmware Social Engineering Advertising Malware 72

SecureList

NOVEMBER 14, 2022

Okta was breached through one of its service providers, Sitel, itself compromised via the insecure VPN gateway of a recently acquired company. In both cases, we described new UEFI firmware bootkits that managed to propagate malicious components from the deepest layers of the machine up to Windows’ user-land.

Firmware 110

Firmware Surveillance Mobile Telecommunications 110

Security Affairs

JULY 31, 2019

“To update to the latest firmware, each user should select the “Check for Upgrade” option in the “Centrals” menu in the GUI. Locate control system networks and remote devices behind firewalls, and isolate them from the business network. Also recognize that VPN is only as secure as the connected devices.”

Backups 55

Backups Authentication Advertising Firmware 55

eSecurity Planet

MAY 2, 2024

20% increase accesses of specific organizations advertised. Deny-lists (aka: blacklist) : Blocks specific websites or IP addresses by adding them to a list for firewalls to ignore; very difficult to manage at scale. 583% increase in Kerberoasting [password hash cracking] attacks. 20% of employee time is spent on company networks.

Cybersecurity 119

Cybersecurity DDOS Penetration Testing Passwords 119