Security Affairs

APRIL 28, 2023

The vulnerability is an improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.50

Firewall 98

Firewall Firmware VPN Authentication 98

Security Affairs

JUNE 20, 2023

The vulnerability is a pre-authentication command injection issue that impacts the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, 14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, 11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0. ” reads the advisory published by Zyxel.

Firmware 96

Firmware Firewall Authentication VPN 96

Security Affairs

JULY 3, 2023

Researchers reported that there are 490,000 Fortinet firewalls exposing SSL VPN interfaces on the internet, and roughly 69% of them are still vulnerable to CVE-2023-27997. For this reason, if the customer has SSL-VPN enabled, Fortinet is advising customers to take immediate action to upgrade to the most recent firmware release.

Firewall 92

Firewall VPN Firmware Internet 92

Krebs on Security

FEBRUARY 26, 2020

. “We’ve now completed the investigation of all Zyxel products and found that firewall products running specific firmware versions are also vulnerable,” Zyxel wrote in an email to KrebsOnSecurity. “Hotfixes have been released immediately, and the standard firmware patches will be released in March.”

Firewall 244

Firewall Firmware VPN IoT 244

Krebs on Security

JUNE 15, 2023

The directive applies to any networking devices — such as firewalls, routers and load balancers — that allow remote authentication or administration. The researchers found that just being able to reach the management interface for a vulnerable Fortinet SSL VPN appliance was enough to completely compromise the devices.

Risk 202

Risk VPN Internet Internet 202

Security Affairs

JULY 15, 2021

x firmware in an imminent ransomware campaign using stolen credentials.” “The exploitation targets a known vulnerability that has been patched in newer versions of firmware.” The network equipment vendor is now urging customers to update the firmware of their devices as soon as possible. “If 34 or 9.0.0.10

Firmware 109

Firmware Ransomware Passwords Mobile 109

Security Affairs

SEPTEMBER 7, 2022

flaw is classified as a format string vulnerability that resides in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0. Below is the list of affected models and the firmware patches released by the company. Zyxel addressed a critical vulnerability, tracked as CVE-2022-34747 , impacting its network-attached storage (NAS) devices.

Firewall 92

Firewall Firmware Authentication VPN 92

eSecurity Planet

OCTOBER 1, 2021

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have released guidance and best practices for securing virtual private network (VPN) solutions. What might be most striking about the document is how many security steps and solutions it takes to properly secure VPN connections.

VPN 88

VPN Authentication Passwords Software 88

Security Affairs

JUNE 13, 2023

“A heap-based buffer overflow vulnerability [CWE-122] in FortiOS and FortiProxy SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.” If the customer is not operating SSL-VPN the risk of this issue is mitigated – however, Fortinet still recommends upgrading.”

Firewall 93

Firewall VPN Firmware Manufacturing 93

eSecurity Planet

JANUARY 16, 2024

The problem: Ivanti announced two vulnerabilities that affect Ivanti Connect Secure VPN and Ivanti Policy Secure products. Potential results of the exploits include authentication bypass and command injection. According to Bitdefender, the thermostat does not validate the authenticity of a new firmware update. Versions 9.x

Firewall 91

Firewall Firmware IoT Authentication 91

Malwarebytes

APRIL 4, 2022

Zyxel says the vulnerability, listed as CVE-2022-0342 , is an authentication bypass vulnerability caused by the lack of a proper access control mechanism, which has been found in the CGI program of some firewall versions. The flaw could allow an attacker to bypass the authentication and obtain administrative access of the device.

Firewall 75

Firewall Firmware VPN Authentication 75

Malwarebytes

JULY 15, 2021

The exploitation targets a known vulnerability that has been patched in newer versions of SonicWall firmware. x versions of the firmware. x firmware. x firmware versions. SSL-VPN 200/2000/400 (EOL 2013/2014) disconnect immediately and reset passwords. SMA 210/410/500v (Actively Supported) update firmware to 9.0.0.10-28sv

Ransomware 80

Ransomware Firmware VPN Firewall 80

The Last Watchdog

MAY 23, 2022

They require integrity, authentication, trusted identity and encryption. Protocols and policies setting new parameters for trusted connections are being hammered out and advanced encryption, authentication and data protection solutions are being ramped up. Related: Leveraging PKI to advance electronic signatures.

Digital transformation 194

Digital transformation Computers and Electronics Cybersecurity Encryption 194

eSecurity Planet

JANUARY 22, 2024

The problem: The Unified Extensible Firmware Interface (UEFI) specification has an open-source network implementation, EDK II, with nine discovered vulnerabilities. The vulnerability also exists on GitHub Enterprise Server, but it can only be exploited by an authenticated user with an organization owner role. EPMM versions 11.10, 11.9

Authentication 96

Authentication Malware VPN Mobile 96

Security Affairs

JUNE 23, 2021

A critical vulnerability, tracked as CVE-2021-20019 , in SonicWall VPN appliances was only partially patched last year and could allow a remote attacker to steal sensitive data. The flaw resides in the HTTP/HTTPS service used for product management as well as SSL VPN remote access. “An reads the analysis published by Tripwire.

VPN 89

VPN Firewall Firmware Authentication 89

eSecurity Planet

MARCH 21, 2022

Using misconfigured multi-factor authentication (MFA) and an unpatched Windows vulnerability, Russian state-sponsored hackers were able to breach a non-governmental organization (NGO) and escalate privileges, the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI revealed last week. Network Best Practices.

VPN 103

VPN Accountability Authentication Passwords 103

Security Affairs

OCTOBER 22, 2022

The Daixin Team group gains initial access to victims through virtual private network (VPN) servers. In one successful attack, the attackers likely exploited an unpatched vulnerability in the organization’s VPN server. In another compromise, the group leveraged on compromised credentials to access a legacy VPN server.

Ransomware 75

Ransomware VPN Cybercrime Accountability 75

SecureWorld News

OCTOBER 8, 2023

Additionally, be cautious when adding new friends; verify their authenticity through known offline connections. Use the administrator account only for maintenance, software installation, or firmware updates. Attention should be paid to protecting routers and updating their firmware. Opt for strong, hard-to-crack passwords.

Firmware 80

Firmware IoT Accountability Passwords 80

Kali Linux

NOVEMBER 27, 2022

To enable wireless support, we need to find: The kernel Wi-Fi modules that need to be in the initramfs (Depends on hardware) The Wi-Fi firmware files that need to be in the initramfs (Depends on hardware) The Wireless interface name (Kali defaults to: wlan0 ) Additional packages to increase functionally. bin firmware: brcm/brcmfmac*-sdio.*.txt

Firmware 52

Firmware Wireless Passwords VPN 52

Security Affairs

MARCH 16, 2022

As Duo’s default configuration settings allow for the re-enrollment of a new device for dormant accounts, the actors were able to enroll a new device for this account, complete the authentication requirements, and obtain access to the victim network.” ” reads the joint advisory. ” continues the analysis.

Accountability 97

Accountability Passwords Authentication Firmware 97

IT Security Guru

JUNE 22, 2021

Check that your OS, applications and firmware are updated with appropriate patches. Any systems you have in place to allow staff to connect into your organisation remotely, including VPN. Authentication and access control, these include: Ensuring all passwords are changed from defaults. External systems. With CoCo: 2.

Passwords 93

Passwords Authentication Wireless Government 93

Security Affairs

SEPTEMBER 3, 2021

Install updates/patch operating systems, software, and firmware as soon as they are released. Use multifactor authentication with strong pass phrases where possible. Consider installing and using a VPN. hard drive, storage device, the cloud). Install and regularly update anti-virus and anti-malware software on all hosts.

Ransomware 104

Ransomware Passwords Backups Firmware 104

Security Boulevard

MARCH 15, 2022

A few days later, Lapsus$ announced on its Telegram channel that it had breached Samsung and offered evidence including biometric authentication information and source code from both Samsung and one of its suppliers, Qualcomm. The group is also asking Nvidia to open source its GPU drivers for macOS, Windows, and Linux devices.

Ransomware 125

Ransomware Telecommunications Firmware Media 125

NopSec

JANUARY 30, 2019

CVE-2019-1652: Allows an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands on the system. CVE-2019-1652 (remote code execution vulnerability) affects Cisco Small Business RV320 and RV325 WAN VPN Routers running Firmware Releases 1.4.2.15 and 1.4.2.17.

Small Business 40

Small Business Firmware VPN Authentication 40

Security Affairs

MARCH 19, 2022

Install updates/patch operating systems, software, and firmware as soon as updates/patches are released. Use multifactor authentication where possible. Consider installing and using a VPN. Ensure copies of critical data are not accessible for modification or deletion from the system where the data resides. Disable unused ports.

Ransomware 105

Ransomware DDOS Passwords Backups 105

Security Affairs

MARCH 23, 2021

“GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10, or greater to resolve these vulnerabilities. It allows sensitive information exposure without authentication.” Also recognize VPN is only as secure as the connected devices. ” states CISA.

Firmware 88

Firmware VPN Firewall Risk 88

Security Affairs

APRIL 25, 2022

Install updates/patch operating systems, software, and firmware as soon as updates/patches are released. Use multifactor authentication where possible. Consider installing and using a virtual private network (VPN). hard drive, storage device, the cloud). Implement the shortest acceptable timeframe for password changes.

Ransomware 113

Ransomware Antivirus Passwords Malware 113

eSecurity Planet

MARCH 1, 2023

To prevent unwanted access and protect data in transit, wireless connections must be secured with strong authentication procedures, encryption protocols, access control rules, intrusion detection and prevention systems, and other security measures. As a result, wireless networks are prone to eavesdropping, illegal access and theft.

Wireless 83

Wireless Encryption Authentication IoT 83

SiteLock

AUGUST 27, 2021

To help avoid these online risks, it is highly recommended to use a Virtual Private Network (VPN). VPNs are the baseline cybersecurity tool to safeguard internet-enabled devices and a home network. A VPN provides a secure internet connection, ensuring your browsing data is encrypted for maximum privacy and security.

IoT 98

IoT Spyware VPN Passwords 98

Security Affairs

JUNE 27, 2022

Try using secure VPN networks when remote access is required, and perform adequate access control and auditing. recommending vendors who use CODESYS V2 Runtime to investigate themselves in time, and actively to fix and release the patched version of firmware. Follow me on Twitter: @securityaffairs and Facebook.

Software 93

Software Manufacturing Firmware Risk 93

Malwarebytes

MARCH 17, 2021

To prevent attacks: Install security updates for operating systems, software, and firmware as soon as they are released. Use multi-factor authentication wherever possible. Consider installing and using a VPN. The FBI’s “Flash” alert includes these recommended mitigations for potential targets.

Education 107

Education Ransomware Phishing Passwords 107

Malwarebytes

SEPTEMBER 21, 2021

Enable multi-factor authentication (MFA). Multi-factor authentication is a great step to add in on every service that offers it. This could be a one-time login code sent via text, a code on an authenticator app, or a push notification, among others. Update your child’s device’s firmware.

Internet 104

Internet Internet Passwords Password Management 104

eSecurity Planet

APRIL 28, 2022

Malicious actors tend to focus on internet-facing systems to gain entry into a network, such as email and virtual private network (VPN) servers, using exploits targeting newly disclosed vulnerabilities. Also read: Best Patch Management Software & Tools. Web-Facing Systems at Risk. “U.S.,

Cybersecurity 106

Cybersecurity Software Firmware Internet 106

Security Affairs

MAY 13, 2021

Require multi-factor authentication for remote access to OT and IT networks. Update software , including operating systems, applications, and firmware on IT network assets, in a timely manner. After assessing risks, if RDP is deemed operationally necessary, restrict the originating sources and require multi-factor authentication.

Ransomware 118

Ransomware Healthcare Phishing Risk 118

Security Affairs

MARCH 26, 2021

Install updates/patch operating systems, software, and firmware as soon as they are released. • Use multifactor authentication where possible. Consider installing and using a VPN. hard drive, storage device, the cloud). Implement the shortest acceptable timeframe for password changes. The FBI does not encourage paying ransoms.

Ransomware 144

Ransomware Encryption Passwords Malware 144

Security Affairs

JULY 31, 2019

The list of flaws includes OS Command Injection, Unrestricted Upload of File with Dangerous Type, Cross-site Request Forgery, Small Space of Random Values, Cross-site Scripting, Exposure of Backup file to Unauthorized Control Sphere, Improper Authentication, and Use of Hard-coded Credentials. “Prima Systems FlexAir, Versions 2.3.38

Backups 60

Backups Authentication Advertising Firmware 60

Security Affairs

OCTOBER 20, 2018

Meaning, authentication bypasses weren’t enough. CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. Firmware Analysis. Summary of Our Findings.

Firmware 65

Firmware IoT VPN Authentication 65