eSecurity Planet

APRIL 15, 2024

Threats range from severe weaknesses in Ivanti’s VPN appliances to zero-day exploits in popular software such as Palo Alto Networks’ PAN-OS and Telegram’s Windows client. Typically, these vulnerabilities result in remote code execution or denial-of-service attacks, posing major dangers to users’ data security.

Firewall 107

Firewall VPN Software Risk 107

eSecurity Planet

SEPTEMBER 5, 2023

Unpatched devices can give attackers privileged access to networks, particularly those set up as VPN virtual servers, ICA proxies, RDP proxies, or AAA servers. It is suspected that the Akira ransomware organization used an undisclosed weakness in Cisco VPN software to evade authentication. MFA should be enabled for all VPN users.

VPN 103

VPN Authentication Ransomware Antivirus 103

SiteLock

AUGUST 27, 2021

Unaware : Password hygiene is a huge problem that puts personal and business data at risk. Many employees are unaware using the same password across multiple personal is a significant security risk. The reason many employees use the same passwords across all work accounts is simple – they can keep track of them all.

Security Awareness 98

Security Awareness Passwords Phishing Scams 98

eSecurity Planet

APRIL 30, 2024

Gather the necessary equipment, evaluate the network layout, and become familiar with the firewall documentation. Disabling default accounts and changing passwords improve security, as does requiring strong passwords for administrator accounts. Physically install the firewall and ensure appropriate connections.

Firewall 60

Firewall Architecture Firmware Risk 60

eSecurity Planet

DECEMBER 7, 2023

Cryptographic keys can be random numbers, products of large prime numbers, points on an ellipse, or a password generated by a user. The algorithm allows for variable key sizes and variable rounds to increase randomness and security. While the math remains the same, unique cryptographic keys generate unique ciphertext.

Encryption 111

Encryption Passwords IoT Firewall 111

eSecurity Planet

DECEMBER 7, 2023

Users can establish a symmetric key to share private messages through a secure channel, like a password manager. Unfortunately, while symmetric encryption is a faster method, it is also less secure because sharing the key exposes it to theft.

Encryption 107

Encryption Authentication Passwords Password Management 107

eSecurity Planet

APRIL 26, 2024

These controls include: Active Directory (AD): Manages users, groups, and passwords as a fundamental access control for an organization and the basis for most other security tools. Basic to Advanced Iterative Planning Effective iterative planning balances operations goals, business risk, and security objectives in a written plan.

Architecture 117

Architecture Network Security Firewall Risk 117