article thumbnail

New Cring ransomware deployed targeting unpatched Fortinet VPN devices

Security Affairs

Attackers are actively exploiting the CVE-2018-13379 flaw in Fortinet VPN to deploy the Cring ransomware to organizations in the industrial sector. “The primary causes of the incident include the use of an outdated and vulnerable firmware version on the Fortigate VPN server (version 6.0.2 ” continues Kaspersky.

VPN 105
article thumbnail

BlackCat Ransomware gang breached over 60 orgs worldwide

Security Affairs

Review antivirus logs for indications they were unexpectedly turned off. Install updates/patch operating systems, software, and firmware as soon as updates/patches are released. Install and regularly update antivirus and anti-malware software on all hosts. Consider installing and using a virtual private network (VPN).

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

A mysterious code prevents QNAP NAS devices to be updated

Security Affairs

The user ianch99 in the QNAP NAS community forum reported that the antivirus ClamAV was failing to update due to 0.0.0.0 “Since recent firmware updates, the ClamAV Antivirus fails to update due to 700+ clamav.net entries in /etc/hosts, all set to 0.0.0.0 clamav.net host file entries. e.g.” wrote the user ianch99.

Antivirus 102
article thumbnail

Beyond the Office: Securing Home Devices and Networks Against Corporate Breaches

SecureWorld News

Use the administrator account only for maintenance, software installation, or firmware updates. Attention should be paid to protecting routers and updating their firmware. While OS updates are now commonly practiced, router firmware updates remain an overlooked aspect. Opt for strong, hard-to-crack passwords.

article thumbnail

Defending Against Misconfigured MFA & PrintNightmare Vulnerabilities

eSecurity Planet

They then authenticated to the victim’s VPN to initiate a remote desktop protocol (RDP) connection to the domain controllers. Update software, including operating systems, applications, and firmware on IT network assets in a timely manner. When possible, implement multi-factor authentication on all VPN connections.

VPN 103
article thumbnail

Avoslocker ransomware gang targets US critical infrastructure

Security Affairs

Install and regularly update antivirus software on all hosts, and enable real time detection. Install updates/patch operating systems, software, and firmware as soon as updates/patches are released. Consider installing and using a VPN. Avoid reusing passwords for multiple accounts. Focus on cyber security awareness and training.

article thumbnail

The State of Endpoint Security Management in 2022: It’s Worse Than You Suspect

CyberSecurity Insiders

Back then, endpoint security focused on computers, which meant the installation of antivirus, malware protection, firewall, and (sometimes) VPN in every computer. Unfortunately, it is no longer as simple as it used to be in the past. Nowadays, endpoints are way more than their numbers from a couple of decades ago.

IoT 120