Advertising, Firewall and Information Security

Hackers exploit SQL injection zero-day issue in Sophos firewall

Security Affairs

APRIL 26, 2020

Cybersecurity firm Sophos releases an emergency patch to address an SQL injection flaw in its XG Firewall product that has been exploited in the wild. Cybersecurity firm Sophos has released an emergency patch to address an SQL injection zero-day vulnerability affecting its XG Firewall product that has been exploited in the wild.

Firewall

Firewall Passwords Accountability Advertising

Cisco fixes 5 critical flaws that could allow router firewall takeover

Security Affairs

JULY 16, 2020

Cisco has released security updates to address critical remote code execution (RCE), authentication bypass, and static default credential vulnerabilities affecting multiple router and firewall devices. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Firewall

Firewall Small Business Wireless Authentication

Palo Alto Networks fixes a critical flaw in firewall PAN-OS

Security Affairs

JUNE 29, 2020

Palo Alto Networks addressed a critical flaw in the PAN-OS of its next-generation firewalls that could allow attackers to bypass authentication. OS ) that powers its next-generation firewalls that could allow unauthenticated network-based attackers to bypass authentication. x base score of 10. Pierluigi Paganini.

Firewall

Firewall Authentication VPN Advertising

Sophos fixed a critical vulnerability in Cyberoam firewalls

Security Affairs

OCTOBER 10, 2019

A vulnerability in Sophos Cyberoam firewalls could be exploited by an attacker to gain access to a target’s internal network without authentication. Sophos addressed a vulnerability in its Cyberoam firewalls that could be exploited by an attacker to gain access to a company’s internal network without providing a password.

Firewall

Firewall VPN Passwords Internet

Palo Alto Networks addresses tens of serious issues in PAN-OS

Security Affairs

MAY 15, 2020

Palo Alto Networks addressed tens of vulnerabilities in PAN-OS, the software that runs on the company’s next-generation firewalls. Palo Alto Networks has issued security updates to address tens of vulnerabilities in PAN-OS, the software that runs on the company’s next-generation firewalls. Pierluigi Paganini.

Firewall

Firewall Authentication Advertising VPN

Palo Alto Networks addresses another high severity issue in PAN-OS devices

Security Affairs

JULY 9, 2020

Palo Alto Networks addressed a new severe vulnerability in the PAN-OS GlobalProtect portal that impacts PAN next-generation firewalls. Recently Palo Alto Network addressed a critical vulnerability , tracked as CVE-2020-2021, affecting the PAN-OS operating system that powers its next-generation firewall. x base score of 10. .

Firewall

Firewall Advertising Authentication Hacking

Almost 800,000 SonicWall VPN appliances online are vulnerable to CVE-2020-5135

Security Affairs

OCTOBER 16, 2020

. “A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. Security experts from Tenable have published a post detailing the flaw, they also shared Shodan dorks for searching SonicWall VPNs.

VPN

VPN Firewall Advertising Internet

FBI is warning of cyber attacks against Windows 7 systems that reached end-of-life

Security Affairs

AUGUST 6, 2020

.” “With fewer customers able to maintain a patched Windows 7 system after its end of life, cyber criminals will continue to view Windows 7 as a soft target,” Feds urge organizations to upgrading their systems running Windows 7 to newer versions for which the IT giant is still providing security updates. Pierluigi Paganini.

Cyber Attacks

Cyber Attacks Healthcare Firewall Advertising

Palo Alto Networks fixes severe Code Execution and DoS flaws in PAN-OS

Security Affairs

SEPTEMBER 10, 2020

Palo Alto Networks addressed critical and high-severity denial-of-service (DoS) and arbitrary code execution vulnerabilities in its PAN-OS firewall software. Palo Alto Networks has released security updates to patch critical and high-severity denial-of-service (DoS) and arbitrary code execution vulnerabilities in its PAN-OS firewall software.

Firewall

Firewall Authentication Advertising Software

KingComposer fixes a reflected XSS impacting 100,000 WordPress sites

Security Affairs

JULY 10, 2020

We release a firewall rule covering both the patched and unpatched vulnerabilities to our Premium users. July 15, 2020 – Firewall rule becomes available to Wordfence Free users. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Firewall

Firewall Advertising Hacking Information Security

CVE-2020-3452 flaw in Cisco ASA/FTD exploited within hours after the disclosure

Security Affairs

JULY 24, 2020

Cisco fixed CVE-2020-3452 high-severity path traversal flaw in its firewalls that can be exploited by remote attackers to obtain sensitive files from the targeted system. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Firewall

Firewall Advertising Software Hacking

Aquabot variant v3 targets Mitel SIP phones

Security Affairs

JANUARY 29, 2025

The threat actors behind Aquabot have been advertising it as a DDoS-as-a-service on platforms like Telegram under various misleading names, such as Cursinq Firewall and The Eye Botnet. They often claim it is for DDoS mitigation testing, but experts pointed out that it spreads Mirai malware and is used for real attacks.

DDOS

DDOS Firmware Malware Firewall

New Ttint IoT botnet exploits two zero-days in Tenda routers

Security Affairs

OCTOBER 5, 2020

Unlike other IoT DDoS botnets, Ttint implements 12 remote access functions such as Socket5 proxy for router devices, tampering with router firewall and DNS settings, executing remote custom system commands. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” concludes the report.

IoT

IoT Firmware DNS Advertising

DoS attack the caused disruption at US power utility exploited a known flaw

Security Affairs

SEPTEMBER 9, 2019

A DoS attack that caused disruptions at a power utility in the United States exploited a flaw in a firewall used in the facility. The incident took place earlier this year, threat actors exploited a known vulnerability in a firewall used by the affected facility to cause disruption. and 7 p.m., power grid ( Energywire , April 30). .

Energy and Utilities

Energy and Utilities Firewall Firmware Advertising

Expert released DOS Exploit PoC for Critical Windows RDP Gateway flaws

Security Affairs

JANUARY 24, 2020

. “Simply disabling UDP Transport, or firewalling the UDP port (usually port 3391) is sufficient to prevent exploitation,” explained the popular researcher Marcus Hutchins. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Advertising

Advertising Firewall Education Authentication

Juniper Networks addressed many issues in its products

Security Affairs

JULY 10, 2020

Juniper Networks addressed several vulnerabilities in its firewalls, most of them can be exploited by attackers for denial-of-service (DoS) attacks. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Firmware

Firmware Advertising Firewall Internet

Imperva data Breach: WAF customers’ data exposed

Security Affairs

AUGUST 27, 2019

Security firm Imperva revealed it has suffered a data breach that affecting some customers of its Cloud Web Application Firewall (WAF) product. Cybersecurity firm Imperva disclosed a data breach that has exposed sensitive information for some customers of its Cloud Web Application Firewall (WAF) product, formerly known as Incapsula.

Data breaches

Data breaches Firewall Passwords Advertising

Threat actors target WordPress sites using vulnerable File Manager install

Security Affairs

SEPTEMBER 11, 2020

Cruz shared his findings with WordPress security firm Wordfence and provided it a working proof of concept exploit for the flaw. The security firm confirmed the ongoing attack, its Web Application Firewall blocked over 450,000 exploit attempts during the last several days. Wordfence said. Pierluigi Paganini.

Firewall

Firewall Passwords Advertising Hacking

Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

Security Affairs

MARCH 13, 2025

The threat actors use PsExec to execute scripts, enable RDP access, and modify firewall rules. Encryption is executed using gaze.exe , which disables security tools, deletes backups, and encrypts files with AES-256 before dropping a ransom note. Attackers use Mimikatz to steal credentials.

Ransomware

Ransomware Encryption Cryptocurrency Insurance

TeamTNT is the first cryptomining bot that steals AWS credentials

Security Affairs

AUGUST 18, 2020

Use firewall rules to limit any access to Docker APIs. We strongly recommend using a whitelisted approach for your firewall ruleset. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Firewall

Firewall Advertising Malware Cryptocurrency

Cyber Defense Magazine – September 2019 has arrived. Enjoy it!

Security Affairs

SEPTEMBER 4, 2019

In addition, we’re shooting for 7x24x365 uptime as we continue to scale with improved Web App Firewalls, Content Deliver Networks (CDNs) around the Globe, Faster and More Secure DNS and CyberDefenseMagazineBackup.com up and running as an array of live mirror sites.

DNS

DNS Advertising Firewall Mobile

Discount Rules for WooCommerce WordPress plugin gets patch once again

Security Affairs

SEPTEMBER 21, 2020

We released a firewall rule to protect against these vulnerabilities the same day.” “During our investigation, we also discovered a separate set of vulnerabilities in the plugin that were not yet patched, and released a firewall rule to protect against these separate vulnerabilities the next day, on August 21, 2020.”

Firewall

Firewall Advertising Hacking Information Security

Cyber Defense Magazine – August 2019 has arrived. Enjoy it!

Security Affairs

AUGUST 1, 2019

In addition, we’re shooting for 7x24x365 uptime as we continue to scale with improved Web App Firewalls, Content Deliver Networks (CDNs) around the Globe, Faster and More Secure DNS and CyberDefenseMagazineBackup.com up and running as an array of live mirror sites.

DNS

DNS Advertising Firewall Mobile

A critical flaw in Rank Math WordPress plugin allows hackers to give users Admins privileges

Security Affairs

MARCH 31, 2020

Firewall rule released for Wordfence Premium users. April 23, 2020 – Firewall rule becomes available to Wordfence free users. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Full vulnerability disclosure sent.

Firewall

Firewall Advertising Authentication Engineering

Critical RCE affects older Diebold Nixdorf ATMs

Security Affairs

JUNE 9, 2019

The experts pointed out that this attack could be prevented by properly configuring the terminal-based firewall that is included in the older version of Opteve ATMs. the good news is that the firewall is enabled by default, this means that only ATM owners that disabled it are at risk. Pierluigi Paganini.

Firewall

Firewall Financial Services Advertising Risk

Hackers abusing the Ngrok platform phishing attacks

Security Affairs

FEBRUARY 16, 2021

Researchers at the threat intelligence firm Cyble discovered a new wave of phishing attacks targeting multiple organizations that are abusing the ngrok platform, a secure and introspectable tunnel to the localhost. Cyble also spotted a phishing tool kit, named “KingFish3 (Social master), advertised on a cybercrime forum. 4f421deb219c[.]ngrok[.]io)

Phishing

Phishing Cybercrime Mobile Internet

Cyber Defense Magazine – July 2019 has arrived. Enjoy it!

Security Affairs

JULY 1, 2019

In addition, we’re shooting for 7x24x365 uptime as we continue to scale with improved Web App Firewalls, Content Deliver Networks (CDNs) around the Globe, Faster and More Secure DNS and CyberDefenseMagazineBackup.com up and running as an array of live mirror sites.

DNS

DNS Advertising Firewall Mobile

Chinese police arrested the operator of unauthorized VPN service that made $1.6 million from his activity

Security Affairs

JANUARY 17, 2020

China continues to intensify the monitoring of the cyberspace applying and persecution of VPN services that could be used to bypass its censorship system known as the Great Firewall. The Great Firewall project already blocked access to more hundreds of the world’s 1,000 top websites, including Google, Facebook, Twitter, and Dropbox.

VPN

VPN Firewall Advertising Media

Flaws in leading industrial remote access systems allow disruption of operations

Security Affairs

OCTOBER 1, 2020

CISA also published a security advisory for these vulnerabilities, the US agency provided the following recommendations to the users: Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet. Also recognize that VPN is only as secure as the connected devices.

Advertising

Advertising Authentication Firewall Hacking

Flaw in Ad Inserter WordPress plugin allows remote attackers to execute code

Security Affairs

JULY 15, 2019

Below the disclosure timeline: July 12 – Vulnerability discovered by Wordfence Threat Intelligence Team July 12 – Firewall rule released to Wordfence Premium users July 12 – Plugin developer notified of the security issue July 13 – Patch released August 11 – Firewall rule becomes available to free users.

Authentication

Authentication Firewall Advertising Information Security

HP Device Manager flaws expose Windows systems to hack

Security Affairs

OCTOBER 4, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – hacking, HP).

Hacking

Hacking Accountability InfoSec Passwords

US CISA report shares details on web shells used by Iranian hackers

Security Affairs

SEPTEMBER 16, 2020

The adversary may have used the ‘FRP’ utility to tunnel outbound Remote Desktop Protocol (RDP) sessions, allowing persistent access to the network from outside the firewall perimeter.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” continues the report. Pierluigi Paganini.

VPN

VPN Passwords Advertising Hacking

US Govt agencies detail North Korea-linked HIDDEN COBRA malware

Security Affairs

FEBRUARY 14, 2020

Enable a personal firewall on agency workstations, configured to deny unsolicited connection requests. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. . Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware

Malware Passwords Advertising Antivirus

PoC exploit code for Apache Solr RCE flaw is available online

Security Affairs

NOVEMBER 25, 2019

” continues the advisory” If this port is opened for inbound traffic in your firewall, then anyone with network access to your Solr nodes will be able to access JMX, which may in turn allow them to upload malicious code for execution on the Solr server.” . “If you use the default solr. are affected by the flaw.

Advertising

Advertising Firewall Authentication Engineering

Convert Plus WordPress plugin flaw allows hackers to create Admin accounts

Security Affairs

MAY 30, 2019

Firewall rule released for Premium users. June 27 – Planned date for firewall rule’s release to Free users. If you appreciate my effort in spreading cybersecurity awareness, please vote for Security Affairs in the section “Your Vote for the Best EU Security Tweeter” Thank you. Pierluigi Paganini.

Accountability

Accountability Firewall Passwords Advertising

NSA urges Windows Users and admins to Patch BlueKeep flaw

Security Affairs

JUNE 5, 2019

In addition to installing the patches from Microsoft, Windows users can mitigate attacks: Block TCP Port 3389 at your firewalls, especially any perimeter firewalls exposed to the internet. This security improvement requires attackers to have valid credentials to perform remote code authentication. Pierluigi Paganini.

Penetration Testing

Penetration Testing Firewall Authentication Advertising

Imperva explains how hackers stole AWS API Key and accessed to customer data

Security Affairs

OCTOBER 14, 2019

Imperva shared details on the incident it has recently suffered and how hackers obtain data on Cloud Web Application Firewall (WAF) customers. In August, cybersecurity firm Imperva disclosed a data breach that exposed sensitive information for some customers of its Cloud Web Application Firewall (WAF) product, formerly known as Incapsula.

Firewall

Firewall Passwords Accountability Data breaches

Stored XSS in WP Product Review Lite plugin allows for automated takeovers

Security Affairs

MAY 18, 2020

“During a routine research audit for our Sucuri Firewall , we discovered an Unauthenticated Persistent Cross-Site Scripting (XSS) affecting 40,000+ users of the WP Product Review plugin.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the analysis published by Sucuri.

Advertising

Advertising Authentication Firewall Hacking

Microsoft issues targeted notification to hospitals vulnerable to Ransomware attacks

Security Affairs

APRIL 2, 2020

Below some mitigations recommended by the Microsoft Defender Advanced Threat Protection (ATP) Research Team to reduce risk from threats that exploit gateways and VPN vulnerabilities: Apply all available security updates for VPN and firewall configurations. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware

Ransomware VPN Healthcare Cyber Attacks

Capital One Hacker indicted on federal charges for Wire Fraud and Computer Data Theft

Security Affairs

AUGUST 29, 2019

According to the indictment, Paige THOMPSON created a scanning software that used to identify AWS customers who had misconfigured their firewalls, then the hacker accessed their servers to steal data, and to “mine” cryptocurrency. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Last week, a U.S.

Firewall

Firewall Cryptocurrency Telecommunications Advertising

Cisco fixes 34 High-Severity flaws in IOS and IOS XE software

Security Affairs

SEPTEMBER 25, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Cisco fixes 34 High-Severity flaws in IOS and IOS XE software appeared first on Security Affairs. Pierluigi Paganini. SecurityAffairs – hacking, DoS).

Software

Software DNS Wireless Advertising

NCSC warns of a surge in ransomware attacks on education institutions

Security Affairs

SEPTEMBER 20, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Recently Check Point researchers warned of a surge in the DDoS attacks against education institutions and the academic industry across the world.

Education

Education Ransomware Antivirus Backups

Visa warns of new sophisticated credit card skimmer dubbed Baka

Security Affairs

SEPTEMBER 6, 2020

Set up a Web Application Firewall to block suspicious and malicious requests from reaching the website. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Trust, but verify the steps taken by the company you hire.

eCommerce

eCommerce Malware Encryption Advertising

Cisco released 4CAN hardware tool to find flaws in automotive computers

Security Affairs

AUGUST 24, 2019

This gateway acts as a firewall and can check CAN IDs to determine if the message should be allowed to traverse CAN buses. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the post published by Cisco Talos.

Surveillance

Surveillance Advertising Firewall Hacking

Hackers exploit SQL injection zero-day issue in Sophos firewall

Cisco fixes 5 critical flaws that could allow router firewall takeover

Trending Sources

Palo Alto Networks fixes a critical flaw in firewall PAN-OS

Sophos fixed a critical vulnerability in Cyberoam firewalls

Palo Alto Networks addresses tens of serious issues in PAN-OS

Palo Alto Networks addresses another high severity issue in PAN-OS devices

Almost 800,000 SonicWall VPN appliances online are vulnerable to CVE-2020-5135

FBI is warning of cyber attacks against Windows 7 systems that reached end-of-life

Palo Alto Networks fixes severe Code Execution and DoS flaws in PAN-OS

KingComposer fixes a reflected XSS impacting 100,000 WordPress sites

CVE-2020-3452 flaw in Cisco ASA/FTD exploited within hours after the disclosure

Aquabot variant v3 targets Mitel SIP phones

New Ttint IoT botnet exploits two zero-days in Tenda routers

DoS attack the caused disruption at US power utility exploited a known flaw

Expert released DOS Exploit PoC for Critical Windows RDP Gateway flaws

Juniper Networks addressed many issues in its products

Imperva data Breach: WAF customers’ data exposed

Threat actors target WordPress sites using vulnerable File Manager install

Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

TeamTNT is the first cryptomining bot that steals AWS credentials

Cyber Defense Magazine – September 2019 has arrived. Enjoy it!

Discount Rules for WooCommerce WordPress plugin gets patch once again

Cyber Defense Magazine – August 2019 has arrived. Enjoy it!

A critical flaw in Rank Math WordPress plugin allows hackers to give users Admins privileges

Critical RCE affects older Diebold Nixdorf ATMs

Hackers abusing the Ngrok platform phishing attacks

Cyber Defense Magazine – July 2019 has arrived. Enjoy it!

Chinese police arrested the operator of unauthorized VPN service that made $1.6 million from his activity

Flaws in leading industrial remote access systems allow disruption of operations

Flaw in Ad Inserter WordPress plugin allows remote attackers to execute code

HP Device Manager flaws expose Windows systems to hack

US CISA report shares details on web shells used by Iranian hackers

US Govt agencies detail North Korea-linked HIDDEN COBRA malware

PoC exploit code for Apache Solr RCE flaw is available online

Convert Plus WordPress plugin flaw allows hackers to create Admin accounts

NSA urges Windows Users and admins to Patch BlueKeep flaw

Imperva explains how hackers stole AWS API Key and accessed to customer data

Stored XSS in WP Product Review Lite plugin allows for automated takeovers

Microsoft issues targeted notification to hospitals vulnerable to Ransomware attacks

Capital One Hacker indicted on federal charges for Wire Fraud and Computer Data Theft

Cisco fixes 34 High-Severity flaws in IOS and IOS XE software

NCSC warns of a surge in ransomware attacks on education institutions

Visa warns of new sophisticated credit card skimmer dubbed Baka

Cisco released 4CAN hardware tool to find flaws in automotive computers

Stay Connected