Firewall - Cyber Security Informer

Backdoor in Zyxel Firewalls and Gateways

Schneier on Security

JANUARY 6, 2021

This is bad : More than 100,000 Zyxel firewalls, VPN gateways, and access point controllers contain a hardcoded admin-level backdoor account that can grant attackers root access to devices via either the SSH interface or the web administration panel. […].

Firewall

Firewall VPN Passwords Accountability

What Is a Firewall and Do you Need One?

Adam Levin

JULY 6, 2022

A firewall is a network security device or program designed to prevent unauthorized and malicious internet traffic from entering a private network or device. Firewalls filter incoming network traffic at a computer’s entry points, or ports, where information is exchanged between the computer network and external devices. Probably not.

Firewall

Firewall Software Internet Internet

Firewall Rule Bloat: The Problem and How AI can Solve it

Security Boulevard

MAY 12, 2025

Long lists of firewall rules can lead to misaligned and inconsistent policies, creating gaps in your security perimeter for threat actors to exploit. The post Firewall Rule Bloat: The Problem and How AI can Solve it appeared first on Security Boulevard.

Firewall

Firewall Cybersecurity Network Security

U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

FEBRUARY 6, 2025

Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog. is a buffer overflow issue in Sophos XG Firewall 17.x is a Remote Code Execution flaw in Microsoft Outlook. is a Remote Code Execution flaw in Microsoft Outlook.

Firewall

Firewall Hacking Cybersecurity Risk

Best of 2024: If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door

Security Boulevard

JANUARY 3, 2025

Firewalls and VPN appliances are critical gateways. The post Best of 2024: If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door appeared first on Security Boulevard. Like all on-prem systems, a vulnerability can lead to a compromise that is used to open the door for attackers.

Firewall

Firewall VPN Security Awareness Cybersecurity

Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug

Security Affairs

FEBRUARY 15, 2025

Threat actors are exploiting a recently disclosed vulnerability, tracked as CVE-2025-0108, inPalo Alto Networks PAN-OS firewalls. Researchers warn that threat actors are exploiting a recently disclosed vulnerability, tracked as CVE-2025-0108, in Palo Alto Networks PAN-OS firewalls. ” states GreyNoise. h4 >= 11.2.4-h4

Firewall

Firewall Authentication Architecture Risk

Zyxel firewalls targeted in recent ransomware attacks

Security Affairs

NOVEMBER 25, 2024

Zyxel warns that a ransomware group has been observed exploiting a recently patched command injection issue in its firewalls. Zyxel warns that a ransomware gang has been observed exploiting a recently patched command injection vulnerability, tracked as CVE-2024-42057, in its firewalls for initial compromise.

Firewall

Firewall Ransomware VPN Firmware

Beyond Firewalls: Why Phishing Demands a People-First, Trust-Centric Response

Security Boulevard

APRIL 22, 2025

The post Beyond Firewalls: Why Phishing Demands a People-First, Trust-Centric Response appeared first on Security Boulevard. Phishing attacks are not only more frequent but also more sophisticated, leveraging AI to craft highly convincing messages that bypass traditional security measures.

Firewall

Firewall Phishing Social Engineering Security Awareness

Simplify and Scale Security With Cisco Hybrid Mesh Firewall

Cisco Security

MAY 14, 2025

Cisco solves this with Cisco Hybrid Mesh Firewall. Modern enterprises face challenges balancing security with the operational needs.

Firewall

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

Security Affairs

JANUARY 14, 2025

Experts warn of a new campaign targeting an alleged zero-day in Fortinet FortiGate firewalls with management interfaces exposed online. Arctic Wolf researchers observed a campaign targeting Fortinet FortiGate firewalls with exposed management interfaces, likely exploiting a zero-day vulnerability. ” continues the advisory.

Firewall

Firewall VPN Accountability Firmware

Communications Backdoor in Chinese Power Inverters

Schneier on Security

MAY 16, 2025

The rogue components provide additional, undocumented communication channels that could allow firewalls to be circumvented remotely, with potentially catastrophic consequences, the two people said. Reuters was unable to determine how many solar power inverters and batteries they have looked at.

Firewall

Firewall Risk

Can Your Firewall Be Hacked? Severe Flaws Found in pfSense

Penetration Testing

MAY 19, 2025

Security researcher Navy Titanium have released a technical deep-dive uncovering three severe vulnerabilities affecting pfSense, the popular open-source The post Can Your Firewall Be Hacked? Severe Flaws Found in pfSense appeared first on Daily CyberSecurity.

Firewall

Firewall Hacking Cybersecurity Risk

Protect Your Business With This Seamless Firewall — Now $150 Off

Tech Republic Security

MARCH 27, 2024

DNS FireWall is an intuitive security app built to protect you and your business from malware, phishing, botnets and more security threats.

Firewall

Firewall DNS Phishing Malware

Palo Alto Networks Raises Alarm on Firewall Vulnerability Following Active Exploitation

Penetration Testing

NOVEMBER 15, 2024

Today, Palo Alto Networks, a leading cybersecurity firm, has issued an urgent update to a recent security advisory, raising the severity level to “Critical” after observing active exploitation of a... The post Palo Alto Networks Raises Alarm on Firewall Vulnerability Following Active Exploitation appeared first on Cybersecurity (..)

Firewall

Firewall Cybersecurity

SonicWall warns of an exploitable SonicOS vulnerability

Security Affairs

JANUARY 8, 2025

SonicWall warns customers to address an authentication bypass vulnerability in its firewall’s SonicOS that is “susceptible to actual exploitation.” All customers are encouraged to upgrade their firewalls to the latest MR listed below.” hardware firewalls: SonicOS 6.5.5.1-6n NSv firewalls: SonicOS 6.5.4.v-21s-RC2457

Firewall

Firewall Firmware VPN Authentication

SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks

Security Affairs

MARCH 14, 2025

Operators behind the SuperBlack ransomware exploited two vulnerabilities in Fortinet firewalls for recent attacks. “When the firewall had VPN capabilities, the threat actor created local VPN user accounts with names resembling legitimate accounts but with an added digit at the end. 13.73.13.73, 8.8.8.8, ” reads the report.

Firewall

Firewall Ransomware VPN Encryption

Pygmy Goat Malware: A Sophisticated Network Device Backdoor Targets Firewalls

Penetration Testing

NOVEMBER 4, 2024

This backdoor malware, discovered on Sophos XG... The post Pygmy Goat Malware: A Sophisticated Network Device Backdoor Targets Firewalls appeared first on Cybersecurity News. In a recent report by the National Cyber Security Centre (NCSC), analysts detailed a new malware threat targeting network devices, dubbed “Pygmy Goat.”

Firewall

Firewall Malware Cybersecurity

Palo Alto Networks fixed a high-severity PAN-OS flaw

Security Affairs

DECEMBER 27, 2024

An unauthenticated attacker can exploit this vulnerability to reboot the firewall by sending a malicious packet through its data plane. Repeated exploitation forces the firewall into maintenance mode. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.” ” reads the advisory.

DNS

DNS Firewall Spyware Software

Zero-Trust DNS

Schneier on Security

MAY 16, 2024

ZTDNS aims to solve this decades-old problem by integrating the Windows DNS engine with the Windows Filtering Platform—the core component of the Windows Firewall—directly into client devices. ” By default, the firewall will deny resolutions to all domains except those enumerated in allow lists. ”

DNS

DNS Firewall Engineering Network Security

Palo Alto Networks Firewalls Exposed: BootHole and Other Critical Flaws Uncovered

Penetration Testing

JANUARY 26, 2025

Eclypsium researchers have uncovered multiple critical vulnerabilities in several Palo Alto Networks (PAN) next-generation firewalls (NGFWs). This report The post Palo Alto Networks Firewalls Exposed: BootHole and Other Critical Flaws Uncovered appeared first on Cybersecurity News.

Firewall

Firewall Cybersecurity

Palo Alto Networks confirmed active exploitation of recently disclosed zero-day

Security Affairs

NOVEMBER 16, 2024

Palo Alto Networks confirmed active exploitation of a zero-day in its PAN-OS firewall and released new indicators of compromise (IoCs). Last week, Palo Alto Networks warned customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability (CVSSv4.0 Base Score: 9.3)

Firewall

Firewall Internet Internet VPN

Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces

The Hacker News

JANUARY 14, 2025

Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public internet.

Firewall

Firewall VPN Accountability Authentication

PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs Released

The Hacker News

NOVEMBER 16, 2024

Palo Alto Networks has released new indicators of compromise (IoCs) a day after the network security vendor confirmed that a new zero-day vulnerability impacting its PAN-OS firewall management interface has been actively exploited in the wild.

Firewall

Firewall Network Security

Palo Alto Networks warns of potential RCE in PAN-OS management interface

Security Affairs

NOVEMBER 8, 2024

Palo Alto Networks warns customers to restrict access to their next-generation firewalls because of a potential RCE flaw in the PAN-OS management interface. Palo Alto Networks warns customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability in PAN-OS.

Firewall

Firewall Authentication Internet Internet

SonicWall addressed an improper access control issue in its firewalls

Security Affairs

AUGUST 26, 2024

SonicWall addressed a critical flaw in its firewalls that could allow attackers to achieve unauthorized access to the devices. SonicWall has released security updates to address a critical vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), in its firewalls. 13o Gen 6 Firewalls – 6.5.2.8-2n 5035 and older versions.”

Firewall

Firewall Firmware Malware Internet

Unyielding Defense: Cisco Firewall Achieves AAA Rating From SE Labs

Cisco Security

MARCH 11, 2025

See how Cisco Secure Firewall excelled in the SE Labs test, blocking advanced attacks with innovative threat intelligence and encryption capabilities.

Firewall

Firewall Encryption

SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access

The Hacker News

AUGUST 26, 2024

SonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices. The vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), has been described as an improper access control bug. "An

Firewall

Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices

Security Affairs

JANUARY 15, 2025

. “The build date coded in the last number block also points to the same date range: None of the firewall firmwares examined had been compiled after September 14, 2022.” “As many as 80 different device types can be found in the data leak, with the FortiGate Firewall 40F and 60F being the most widespread.

VPN

VPN Passwords Firewall Firmware

Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits

The Hacker News

JANUARY 23, 2025

An exhaustive evaluation of three firewall models from Palo Alto Networks has uncovered a host of known security flaws impacting the devices' firmware as well as misconfigured security features. These weren't obscure, corner-case vulnerabilities," security vendor Eclypsium said in a report shared with The Hacker News.

Firmware

Firmware Firewall

SonicWall Issues Urgent Patch for Critical Firewall Vulnerability (CVE-2024-40766)

Penetration Testing

AUGUST 22, 2024

The vulnerability, which carries a CVSS score... The post SonicWall Issues Urgent Patch for Critical Firewall Vulnerability (CVE-2024-40766) appeared first on Cybersecurity News.

Firewall

Firewall Network Security Cybersecurity

15,000 FortiGate Firewalls Exposed: Massive Leak Includes VPN Credentials

Penetration Testing

JANUARY 15, 2025

Cybersecurity expert Kevin Beaumont has reported that over 15,000 FortiGate firewall configurations, including VPN credentials, have been publicly The post 15,000 FortiGate Firewalls Exposed: Massive Leak Includes VPN Credentials appeared first on Cybersecurity News.

Firewall

Firewall VPN Cybersecurity

Google Releases PoC for CVE-2025-0110 Command Injection in PAN-OS Firewalls

Penetration Testing

FEBRUARY 20, 2025

A Google researcher has disclosed details and a proof-of-concept (PoC) exploit for a vulnerability (CVE-2025-0110) in Palo Alto The post Google Releases PoC for CVE-2025-0110 Command Injection in PAN-OS Firewalls appeared first on Cybersecurity News.

Firewall

Firewall Cybersecurity

Palo Alto Networks warns that CVE-2025-0111 flaw is actively exploited in attacks

Security Affairs

FEBRUARY 19, 2025

Palo Alto Networks warns that the vulnerability CVE-2025-0111 is actively exploited with two other flaws to compromise PAN-OS firewalls. Palo Alto Networks warns that threat actors are chaining the vulnerability CVE-2025-0111 with two other vulnerabilities, tracked as CVE-2025-0108 with CVE-2024-9474 , to compromise PAN-OS firewalls.

Firewall

Firewall Authentication Architecture Internet

Muddling Meerkat, a mysterious DNS Operation involving China’s Great Firewall

Security Affairs

MAY 1, 2024

The threat actors appear to have the capability to control China’s Great Firewall and were observed utilizing a novel technique involving fake DNS MX records. The experts noticed a spike in activity observed in September 2023. However, the Infoblox researchers have yet to discover the motivation behind the attacks.

DNS

DNS Firewall DDOS Hacking

Palo Alto fixed critical flaws in PAN-OS firewalls that allow for full compromise of the devices

Security Affairs

OCTOBER 9, 2024

Palo Alto fixed critical flaws in PAN-OS firewalls, warning that attackers could chain these vulnerabilities to hijack the devices. Palo Alto Networks addressed multiple vulnerabilities that an attacker can chain to hijack PAN-OS firewalls. ” reads the advisory. ” reads the advisory.

Firewall

Firewall Passwords Authentication Phishing

Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation

The Hacker News

DECEMBER 20, 2024

Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain conditions. Of the three, two are rated Critical in severity. There is currently no evidence that the shortcomings have been exploited in the wild.

Firewall

Attackers exploited SonicWall SMA appliances since January 2025

Security Affairs

APRIL 19, 2025

. “It is important to note that even fully patched firewall devices may still become compromised if accounts use poor password hygiene.” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,Remote Code Execution)

Passwords

Passwords VPN Firewall Accountability

CVE-2024-9474 Exploited: LITTLELAMB.WOOLTEA Backdoor Discovered in Palo Alto Devices

Penetration Testing

DECEMBER 24, 2024

Northwave Cyber Security has identified a sophisticated backdoor, LITTLELAMB.WOOLTEA, targeting Palo Alto Networks firewalls. The backdoor was uncovered during a forensic investigation into a compromised Palo Alto Networks device.

Firewall

Firewall Cybersecurity Malware

U.S. CISA adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

NOVEMBER 7, 2024

Palo Alto Networks Expedition is a tool designed to help users transition to and optimize Palo Alto Networks’ next-generation firewalls. It assists with the migration of configurations from other firewall vendors and legacy Palo Alto Networks devices to newer models.

Firewall

Firewall Authentication Accountability Risk

New Open SSH Vulnerability

Schneier on Security

JULY 3, 2024

Moreover, gaining root access would enable attackers to bypass critical security mechanisms such as firewalls, intrusion detection systems, and logging mechanisms, further obscuring their activities.

Firewall

Firewall Data breaches Malware Risk

Beyond the Firewall: Evansville Christian School Deploys Smarter Google Workspace Security & Safety

Security Boulevard

APRIL 7, 2025

Like many K-12 schools, they have foundational cybersecurity tools in place, including a firewall and GoGuardian for content filtering and student monitoring. The post Beyond the Firewall: Evansville Christian School Deploys Smarter Google Workspace Security & Safety appeared first on Security Boulevard.

Firewall

Firewall Cyber threats Cybersecurity

Best of 2024: The Best SIEM Tools To Consider in 2024

Security Boulevard

DECEMBER 26, 2024

SIEM solutions enable enterprises to monitor and analyze security-related data from a variety of sources, such as firewalls, intrusion detection systems (IDS), and endpoint security devices. What is a SIEM?

Firewall

Zxyel Flaw Powers New Mirai IoT Botnet Strain

Krebs on Security

MARCH 20, 2020

In February, hardware maker Zyxel fixed a zero-day vulnerability in its routers and VPN firewall products after KrebsOnSecurity told the company the flaw was being abused by attackers to break into devices. Security experts at Palo Alto Networks said Thursday their sensors detected the new Mirai variant — dubbed Mukashi — on Mar.

IoT

IoT DDOS VPN Firewall

Quantum Threats and How to Protect Your Data

SecureWorld News

DECEMBER 8, 2024

For example, Palo Alto Networks has integrated PQC into its VPNs and next-generation firewalls to protect data in transit against quantum threats. Ensure quantum-ready hardware: Require that new infrastructure device purchases, such as routers and firewalls, have quantum-resistant or upgradable firmware.

Encryption

Encryption Firewall Education Firmware

Backdoor in Zyxel Firewalls and Gateways

What Is a Firewall and Do you Need One?

Trending Sources

Firewall Rule Bloat: The Problem and How AI can Solve it

U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog

Best of 2024: If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door

Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug

Zyxel firewalls targeted in recent ransomware attacks

Beyond Firewalls: Why Phishing Demands a People-First, Trust-Centric Response

Simplify and Scale Security With Cisco Hybrid Mesh Firewall

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

Communications Backdoor in Chinese Power Inverters

Can Your Firewall Be Hacked? Severe Flaws Found in pfSense

Protect Your Business With This Seamless Firewall — Now $150 Off

Palo Alto Networks Raises Alarm on Firewall Vulnerability Following Active Exploitation

SonicWall warns of an exploitable SonicOS vulnerability

SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks

Pygmy Goat Malware: A Sophisticated Network Device Backdoor Targets Firewalls

Palo Alto Networks fixed a high-severity PAN-OS flaw

Zero-Trust DNS

Palo Alto Networks Firewalls Exposed: BootHole and Other Critical Flaws Uncovered

Palo Alto Networks confirmed active exploitation of recently disclosed zero-day

Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces

PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs Released

Palo Alto Networks warns of potential RCE in PAN-OS management interface

SonicWall addressed an improper access control issue in its firewalls

Unyielding Defense: Cisco Firewall Achieves AAA Rating From SE Labs

SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access

Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices

Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits

SonicWall Issues Urgent Patch for Critical Firewall Vulnerability (CVE-2024-40766)

15,000 FortiGate Firewalls Exposed: Massive Leak Includes VPN Credentials

Google Releases PoC for CVE-2025-0110 Command Injection in PAN-OS Firewalls

Palo Alto Networks warns that CVE-2025-0111 flaw is actively exploited in attacks

Muddling Meerkat, a mysterious DNS Operation involving China’s Great Firewall

Palo Alto fixed critical flaws in PAN-OS firewalls that allow for full compromise of the devices

Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation

Attackers exploited SonicWall SMA appliances since January 2025

CVE-2024-9474 Exploited: LITTLELAMB.WOOLTEA Backdoor Discovered in Palo Alto Devices

U.S. CISA adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog

New Open SSH Vulnerability

Beyond the Firewall: Evansville Christian School Deploys Smarter Google Workspace Security & Safety

Best of 2024: The Best SIEM Tools To Consider in 2024

Zxyel Flaw Powers New Mirai IoT Botnet Strain

Quantum Threats and How to Protect Your Data

Stay Connected