CSO Magazine

FEBRUARY 8, 2021

With most companies forced to transition to remote work, even employees far removed from IT are now actively relying on VPN gateways to secure interactions with co-workers, partners, and clients. The US Cybersecurity and Infrastructure Security Agency (CISA) has documented a number of attacks through vulnerabilities in VPN gateways.

VPN 88

VPN Government Hacking Software 88

CSO Magazine

MAY 8, 2023

In the attacks seen so far the attackers gained access by exploiting known vulnerabilities in VPN appliances, moved laterally to other systems, and deployed legitimate remote monitoring and management (RMM) tools to achieve persistence on the network.

Ransomware 121

Ransomware VPN Cyber threats Encryption 121

CSO Magazine

MAY 4, 2023

Its transformation overhaul was driven by three reasons: compliance with financial services regulations like PCI DSS, replacing traditional VPN technology to improve user experiences and traffic visibility, and strengthening security controls to its Amazon Web Services (AWS) environment. To read this article in full, please click here

Financial Services 107

Financial Services Architecture VPN Technology 107

CSO Magazine

NOVEMBER 5, 2021

In reality, however, many of the DDoS attacks waged against enterprises target components that have long been a part of the network—things such as virtual private network (VPN) devices, firewalls, load balancers and other edge devices. Such devices contain state information used to route and manage traffic.

DDOS 115

DDOS Firewall VPN Technology 115

Malwarebytes

MARCH 23, 2022

In an article on Okta’s website , CSO David Bradbury provided a timeline of the incidents which took place in January. For example, on 10 March, it said it was looking to recruit tech company “employees/insiders” who were prepared to provide remote access, such as VPN or Citrix access. Okta’s statement.

CSO 101

CSO Engineering Passwords Cybercrime 101

SecureWorld News

APRIL 22, 2021

Mandiant is currently tracking 12 malware families associated with the exploitation of Pulse Secure VPN devices. And Pulse Secure's CSO says the company is doing all it can to prevent one: "A secure computing environment is more important each and every day to how we work and live, as threats evolve and emerge.

Government 88

Government CSO Software VPN 88

Security Through Education

OCTOBER 27, 2021

Connect to a secure network and use a company-issued Virtual Private Network (VPN). Typically, corporate networks are equipped with firewalls, a Chief Security Officer (CSO), and a whole cybersecurity department to keep them safe. Lock down your login. Keep your personal and corporate devices on separate Wi-Fi networks.

Cybersecurity 137

Cybersecurity Social Engineering Firewall Engineering 137

CSO Magazine

OCTOBER 18, 2022

for days, began with attackers using a stolen password to gain access to a legacy VPN system. In an all-too-familiar pattern, last year’s Colonial Pipeline ransomware attack, which crippled the delivery of fuel supplies to the Southeastern U.S. That was underscored by a recent joint alert from the U.S.

VPN 97

VPN Passwords Ransomware Cybersecurity 97

CSO Magazine

APRIL 5, 2021

This also degrades the user experience of those remote workers that still rely on conventional, virtual private network (VPN)-only solutions to access the network. This has resulted in a growing gap between network functionality and security coverage, exposing organizations to more points of compromise.

VPN 95

VPN Cybersecurity 95

CSO Magazine

SEPTEMBER 2, 2021

IT departments rushed to install, expand, or upgrade remote desktop access (RDA) servers, virtual private network (VPN) concentrators , and remote access routers to meet surging workforce demand for remote access to data centers. For many, this triggered an increased reliance on remote-access infrastructure and cloud-delivered services.

DNS 96

DNS VPN Software 96

CSO Magazine

FEBRUARY 23, 2021

Traditionally, the way IT dealt with ensuring identity was by forcing users to access the network via a virtual private network (VPN). However, with the global pandemic forcing many users to work from home, VPNs quickly proved to be unscalable and caused performance issues. To read this article in full, please click here

Digital transformation 91

Digital transformation VPN Authentication Technology 91

CSO Magazine

APRIL 26, 2022

Virtual private network (VPN) provider PureVPN has introduced a quantum-resistant feature to its OpenVPN protocol to provide users with more security and privacy for the post-quantum world.

VPN 80

VPN Encryption 80

Security Affairs

AUGUST 29, 2018

With a specialized cyber security tool such as a VPN , anyone can become completely anonymous and invisible online, making it impossible for anyone to detect your presence or activities. They can even hack into your webcam and watch you live, without you knowing about it. About Author: Anas Baig is a Cybersecurity & Tech Writer.

Identity Theft 109

Identity Theft Internet Internet Surveillance 109

CSO Magazine

JUNE 30, 2021

TLS has historically served as the underpinning for VPN technology. TLS, also known as HTTPS, is a form of network traffic encryption that has grown in use over recent years, according to Dan Schiappa, Sophos Chief Product Officer.

Encryption 86

Encryption VPN Malware Internet 86

CSO Magazine

AUGUST 30, 2021

Previously, the company relied on a hub-and-spoke wide-area network (WAN) architecture that used a combination of two managed IP MPLS VPN links and broadband, one MPLS and two broadband, or one broadband and 4G depending on location.

Architecture 78

Architecture Manufacturing Firewall VPN 78

CSO Magazine

MARCH 20, 2023

“While ForgeRock already offers passwordless authentication for mobile and web applications, the new Enterprise Connect Passwordless authentication extends passwordless capabilities to common enterprise infrastructure like workstations, databases, servers, and VPN s,” said Peter Barker, ForgeRock's chief product officer.

Authentication 68

Authentication VPN Mobile Passwords 68

CSO Magazine

NOVEMBER 9, 2022

Over the past several years, hackers have targeted public-facing network devices such as routers, VPN concentrators, and load balancers to gain a foothold into corporate networks.

Firmware 69

Firmware Malware VPN 69

CSO Magazine

APRIL 6, 2022

They will merely hop on another VPN and come in from another location. Blocking traffic from Russia and Belarus may help you limit noise from your log files, and if you run a customer-facing website, from trolls and spam comments, but blocking their location will not slow a dedicated attacker.

Cyber threats 66

Cyber threats VPN Technology Risk 66

CSO Magazine

DECEMBER 9, 2022

These malicious hackers were then able to infiltrate networks by hijacking encrypted VPN tunnels. Cybercriminals moved quickly from attacking the corporate network to targeting poorly defended remote and non-traditional workplaces. To read this article in full, please click here

VPN 63

VPN Encryption Authentication Ransomware 63

BH Consulting

NOVEMBER 11, 2021

A report by Restore Privacy found that some untrustworthy companies are not just buying VPNs to consolidate the industry, but also snapping up the ‘review’ sites that rank them highly. Its analysis claims most VPN users don’t realise these sites are recommending apps that share the same parent company.

Ransomware 52

Ransomware CSO Surveillance Healthcare 52

BH Consulting

OCTOBER 15, 2023

It found the most common intrusion tactics are phishing emails containing malware, Remote Desktop Protocol (RDP) brute forcing, and exploiting Virtual Private Network (VPN) vulnerabilities. MORE Joe Sullivan, Uber’s CSO during its data breach, shares his perspective. MORE Have you signed up to our monthly newsletter?

Ransomware 52

Ransomware Data breaches CSO Cyber Attacks 52

The Last Watchdog

DECEMBER 14, 2023

Instead of arguing about MFA strength, VPN vendor, or nation-state treat actors, let’s finish our conversation about using dedicated administrator accounts and unique passwords. Richard Bird , CSO, Traceable AI Bird The bad guys are showing no restraint in exploiting API security weakness to their advantage.

Cybersecurity 235

Cybersecurity Risk Cyber threats CSO 235