Remove Authentication Remove Firewall Remove Media Remove VPN
article thumbnail

Zyxel fixed a critical RCE flaw in its firewall devices and urges customers to install the patches

Security Affairs

A vulnerability impacting Zyxel firewalls, tracked as CVE-2023-28771, can be exploited to execute arbitary code on vulnerable devices. Researchers from TRAPA Security have discovered a critical remote code execution vulnerability, tracked as CVE-2023-28771 (CVSS score 9.8), impacting Zyxel Firewall. through 5.35. through 5.35.

article thumbnail

Fortinet urges to patch a critical RCE flaw in Fortigate firewalls

Security Affairs

Fortinet released security updates to fix a critical security flaw in its FortiGate firewalls that lead to remote code execution. Fortinet has released security patches to address a critical security vulnerability, tracked as CVE-2023-27997, in its FortiGate firewalls. This is reachable pre-authentication, on every SSL VPN appliance.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Credential-stealing malware disguises itself as Telegram, targets social media users

Malwarebytes

A credential-stealing Windows-based malware, Spyware.FFDroider , is after social media credentials and cookies, according to researchers at ThreatLabz. The malware also plans to steal saved VPN/dial up credentials from the AppdataMicrosoftNetworkConnectionsPbkrasphone.pbk and Pbkrasphone.pbk phonebooks if present. Social media.

Media 129
article thumbnail

Trick or Treat: The Choice is Yours with Multifactor Authentication

Thales Cloud Protection & Licensing

Trick or Treat: The Choice is Yours with Multifactor Authentication. Whether you want the ‘trick’ of a malevolent threat actor infiltrating your network by exploiting a compromised password or the ‘treat’ from the peace of mind associated with multifactor authentication, the choice is yours. Fri, 10/29/2021 - 05:29. Colonial Pipeline.

article thumbnail

Security firm SonicWall was victim of a coordinated attack

Security Affairs

The company was targeted with a coordinated attack on its internal systems, threat actors exploited zero-day vulnerabilities in their VPN solutions, such as NetExtender VPN client version 10.x Below the list of affected products shared by THN: NetExtender VPN client version 10.x x and Secure Mobile Access ( SMA ).

VPN 130
article thumbnail

Blister malware using code signing certificates to evade anti malware detection

CyberSecurity Insiders

Note- From the past few days, some media houses are running rampant reports that the pirated movie copies of “Spider Man No Way Home” might be riddled with crypto mining and blister malware.

Malware 124
article thumbnail

Critical vulnerabilities in Philips Vue PACS devices could allow remote takeover

SC Magazine

flaw, which is caused by improper authentication. Further, the Redis server operates on a remote host but is not protected by password authentication. Administrators should locate control system networks and remote devices, place them behind firewalls, and isolate the devices from the enterprise network.

VPN 121