Remove Authentication Remove DNS Remove Firewall Remove Information Security
article thumbnail

Chinese DriftingCloud APT exploited Sophos Firewall Zero-Day before it was fixed

Security Affairs

China-linked threat actors exploited the zero-day flaw CVE-2022-1040 in Sophos Firewall weeks before it was fixed by the security vendor. On March 25, Sophos announced to have fixed the authentication bypass vulnerability, tracked as CVE-2022-1040, that resides in the User Portal and Webadmin areas of Sophos Firewall.

Firewall 128
article thumbnail

Cisco fixes 34 High-Severity flaws in IOS and IOS XE software

Security Affairs

Two vulnerabilities can allow authenticated attackers with local access to the target devices to execute arbitrary code. One vulnerability can be exploited by an authenticated attacker to access some parts of the user interface they normally should not be able to access.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Static SSH host key in Cisco Umbrella allows stealing admin credentials

Security Affairs

Umbrella is Cisco’s cloud-based Secure Internet Gateway (SIG) platform that provides users with multiple levels of defense against internet-based threats. Umbrella integrates secure web gateway, firewall, DNS-layer security, and cloud access security broker (CASB) functionality to protect systems against threats.

DNS 115
article thumbnail

Security Affairs newsletter Round 370 by Pierluigi Paganini

Security Affairs

Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. If you want to also receive for free the newsletter with the international press subscribe here.

Spyware 71
article thumbnail

PCI v4 is coming. Are you ready?

Pen Test Partners

Section 3 Sensitive authentication data must now be encrypted or protected if stored before authorization. Section 6 A requirement coming into force in March 2025 is that organisations will need to have a web application firewall in place for any web applications exposed to the internet. This means no more ‘your password is incorrect’.

article thumbnail

F5 addressed a flaw in BIG-IP devices rated as critical severity under specific conditions

Security Affairs

Security vendor F5 has addressed more than a dozen high-severity vulnerabilities in its BIG-IP networking device, including an issue that was considered as critical severity when exploited under specific conditions. BIG-IP (DNS) 16.0.0 – 16.0.1 This vulnerability may result in complete system compromise.” 7.0.0 – 7.1.0

article thumbnail

China-linked LightBasin group accessed calling records from telcos worldwide

Security Affairs

” The hacking group initially compromised one of the telecommunication companies by leveraging external DNS (eDNS) servers which are part of the General Packet Radio Service (GPRS) network. Crowdstrike collected evidence of the use of password-spraying attempts using extremely weak either third-party-focused passwords (i.e.