article thumbnail

Akira ransomware received $42M in ransom payments from over 250 victims

Security Affairs

The cybersecurity researchers observed threat actors obtaining initial access to organizations through a virtual private network (VPN) service without multifactor authentication (MFA) configured. “ Akira operators have been observed deploying two distinct ransomware variants against different system architectures within the same attack.

article thumbnail

Weekly Vulnerability Recap – September 4, 2023 – Attackers Hit Network Devices and More

eSecurity Planet

Unpatched devices can give attackers privileged access to networks, particularly those set up as VPN virtual servers, ICA proxies, RDP proxies, or AAA servers. It is suspected that the Akira ransomware organization used an undisclosed weakness in Cisco VPN software to evade authentication. MFA should be enabled for all VPN users.

VPN 96
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Network Security Architecture: Best Practices & Tools

eSecurity Planet

Network security architecture is a strategy that provides formal processes to design robust and secure networks. This article explores network security architecture components, goals, best practices, frameworks, implementation, and benefits as well as where you can learn more about network security architecture.

article thumbnail

Building a Ransomware Resilient Architecture

eSecurity Planet

While security teams layer essential preventative measures, resilience measures also need to be implemented in an architecture to reduce the impact of ransomware attacks on your backups. It’s important to note that disaster recovery (DR) sites are usually not air-gapped due to live VPN between production and the DR site.

article thumbnail

Portnox Cloud: NAC Product Review

eSecurity Planet

Portnox publishes their Security Architecture and Principles for customer review and Portnox Cloud (formerly known as Clear) holds System and Organization Controls (SOC) 2 Type II certification for the NAC-as-a-Service platform.

IoT 93
article thumbnail

How To Set Up a Firewall in 8 Easy Steps + Best Practices

eSecurity Planet

Before performing a firewall configuration, consider factors such as security requirements, network architecture, and interoperability; avoid typical firewall setup errors; and follow the best practices below. Verify that the chosen firewall can meet your security standards and functions.

article thumbnail

16 Remote Access Security Best Practices to Implement

eSecurity Planet

Secure Virtual Private Network (VPN) Use: VPNs are used to protect communication between distant devices and your corporate network. VPNs protect data during transmission from prying eyes via encryption, maintaining the confidentiality and integrity of sensitive data.