Firewall and Information - Cyber Security Informer

What Is a Firewall and Do you Need One?

Adam Levin

JULY 6, 2022

A firewall is a network security device or program designed to prevent unauthorized and malicious internet traffic from entering a private network or device. Firewalls filter incoming network traffic at a computer’s entry points, or ports, where information is exchanged between the computer network and external devices.

Firewall

Firewall Software Internet Internet

U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

FEBRUARY 6, 2025

Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog. is a buffer overflow issue in Sophos XG Firewall 17.x is a Remote Code Execution flaw in Microsoft Outlook. is a Remote Code Execution flaw in Microsoft Outlook.

Firewall

Firewall Hacking Risk Cybersecurity

More than 2,000 Palo Alto Networks firewalls hacked exploiting recently patched zero-days

Security Affairs

NOVEMBER 21, 2024

Threat actors already hacked thousands of Palo Alto Networks firewalls exploiting recently patched zero-day vulnerabilities. Thousands of Palo Alto Networks firewalls have reportedly been compromised in attacks exploiting recently patched zero-day vulnerabilities ( CVE-2024-0012 and CVE-2024-9474 ) in PAN-OS. This week, the U.S.

Firewall

Firewall Hacking VPN Authentication

Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug

Security Affairs

FEBRUARY 15, 2025

Threat actors are exploiting a recently disclosed vulnerability, tracked as CVE-2025-0108, inPalo Alto Networks PAN-OS firewalls. Researchers warn that threat actors are exploiting a recently disclosed vulnerability, tracked as CVE-2025-0108, in Palo Alto Networks PAN-OS firewalls. ” states GreyNoise. h4 >= 11.2.4-h4

Firewall

Firewall Authentication Architecture Risk

Zyxel firewalls targeted in recent ransomware attacks

Security Affairs

NOVEMBER 25, 2024

Zyxel warns that a ransomware group has been observed exploiting a recently patched command injection issue in its firewalls. Zyxel warns that a ransomware gang has been observed exploiting a recently patched command injection vulnerability, tracked as CVE-2024-42057, in its firewalls for initial compromise.

Firewall

Firewall Ransomware VPN Firmware

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

Security Affairs

JANUARY 14, 2025

Experts warn of a new campaign targeting an alleged zero-day in Fortinet FortiGate firewalls with management interfaces exposed online. Arctic Wolf researchers observed a campaign targeting Fortinet FortiGate firewalls with exposed management interfaces, likely exploiting a zero-day vulnerability. ” continues the advisory.

Firewall

Firewall VPN Accountability Firmware

Sophos fixed critical vulnerabilities in its Firewall product

Security Affairs

DECEMBER 20, 2024

Sophos fixed three Sophos Firewall flaws that could lead to SQL injection, privileged SSH access to devices, and remote code execution. Sophos has addressed three vulnerabilities, respectively tracked as CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729, in its Sophos Firewall solution. GA (21.0.0) GA (21.0.0) of devices.

Firewall

Firewall Authentication Passwords Accountability

SonicWall warns of an exploitable SonicOS vulnerability

Security Affairs

JANUARY 8, 2025

SonicWall warns customers to address an authentication bypass vulnerability in its firewall’s SonicOS that is “susceptible to actual exploitation.” All customers are encouraged to upgrade their firewalls to the latest MR listed below.” hardware firewalls: SonicOS 6.5.5.1-6n NSv firewalls: SonicOS 6.5.4.v-21s-RC2457

Firewall

Firewall Firmware VPN Authentication

Palo Alto Networks confirmed active exploitation of recently disclosed zero-day

Security Affairs

NOVEMBER 16, 2024

Palo Alto Networks confirmed active exploitation of a zero-day in its PAN-OS firewall and released new indicators of compromise (IoCs). Last week, Palo Alto Networks warned customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability (CVSSv4.0 Base Score: 9.3)

Firewall

Firewall Internet Internet VPN

Palo Alto Networks warns of potential RCE in PAN-OS management interface

Security Affairs

NOVEMBER 8, 2024

Palo Alto Networks warns customers to restrict access to their next-generation firewalls because of a potential RCE flaw in the PAN-OS management interface. Palo Alto Networks warns customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability in PAN-OS.

Firewall

Firewall Authentication Internet Internet

Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices

Security Affairs

JANUARY 15, 2025

. “The build date coded in the last number block also points to the same date range: None of the firewall firmwares examined had been compiled after September 14, 2022.” “As many as 80 different device types can be found in the data leak, with the FortiGate Firewall 40F and 60F being the most widespread.

VPN

VPN Passwords Firewall Firmware

SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks

Security Affairs

MARCH 14, 2025

Operators behind the SuperBlack ransomware exploited two vulnerabilities in Fortinet firewalls for recent attacks. “When the firewall had VPN capabilities, the threat actor created local VPN user accounts with names resembling legitimate accounts but with an added digit at the end. 13.73.13.73, 8.8.8.8, ” reads the report.

Firewall

Firewall Ransomware VPN Encryption

Palo Alto Networks fixed a high-severity PAN-OS flaw

Security Affairs

DECEMBER 27, 2024

An unauthenticated attacker can exploit this vulnerability to reboot the firewall by sending a malicious packet through its data plane. Repeated exploitation forces the firewall into maintenance mode. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.” ” reads the advisory.

DNS

DNS Firewall Spyware Software

U.S. CISA adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

NOVEMBER 15, 2024

The vulnerabilities reside in the Palo Alto Networks’ Expedition solution, which is a migration tool designed to help organizations move configurations from other firewall platforms (like Check Point, Cisco, and others) to Palo Alto’s PAN-OS. reads the advisory. reads the advisory.

Firewall

Firewall Passwords Authentication Phishing

Fog and Akira ransomware attacks exploit SonicWall VPN flaw CVE-2024-40766

Security Affairs

OCTOBER 29, 2024

“An improper access control vulnerability has been identified in the SonicWall SonicOS management access and SSLVPN, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash.” ” Prior to August 2024, Fog and Akira ransomware attacks targeted a variety of firewall brands.

VPN

VPN Ransomware Firewall Internet

Palo Alto Networks fixed multiple DoS bugs in its firewalls

Security Affairs

APRIL 11, 2024

Palo Alto Networks fixed several vulnerabilities in its PAN-OS operating system, including 3 issues that can trigger a DoS condition on its firewalls. Repeated attacks can eventually trigger a DoS condition by forcing the firewall into maintenance mode, requiring manual intervention to restore online functionality.

Firewall

Firewall Software Engineering Authentication

SonicWall addressed an improper access control issue in its firewalls

Security Affairs

AUGUST 26, 2024

SonicWall addressed a critical flaw in its firewalls that could allow attackers to achieve unauthorized access to the devices. SonicWall has released security updates to address a critical vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), in its firewalls. 13o Gen 6 Firewalls – 6.5.2.8-2n 5035 and older versions.”

Firewall

Firewall Firmware Malware Hacking

Multiple flaws in pfSense firewall can lead to arbitrary code execution

Security Affairs

DECEMBER 15, 2023

Security flaws in Netgate pfSense firewall solution can potentially lead to arbitrary code execution on vulnerable devices. pfSense is a popular open-source firewall solution maintained by Netgate, researchers discovered multiple security issues affecting it. ” reads the analysis published by SonarSource. and pfSense Plus 23.09.

Firewall

Firewall Phishing Authentication Hacking

Palo Alto fixed critical flaws in PAN-OS firewalls that allow for full compromise of the devices

Security Affairs

OCTOBER 9, 2024

Palo Alto fixed critical flaws in PAN-OS firewalls, warning that attackers could chain these vulnerabilities to hijack the devices. Palo Alto Networks addressed multiple vulnerabilities that an attacker can chain to hijack PAN-OS firewalls. ” reads the advisory. ” reads the advisory. ” reads the advisory.

Firewall

Firewall Passwords Authentication Phishing

Zyxel fixed four bugs in firewalls and access points

Security Affairs

FEBRUARY 27, 2024

Taiwanese vendor Zyxel warns of security vulnerabilities in its firewalls and access points, including a remote code execution flaw. Taiwanese networking vendor Zyxel addressed four vulnerabilities, respectively tracked as CVE-2023-6397 , CVE-2023-6398 , CVE-2023-6399 , and CVE-2023-6764 , in its firewalls and access points.

Firewall

Firewall VPN Authentication Hacking

12,000 Juniper SRX firewalls and EX switches vulnerable to CVE-2023-36845

Security Affairs

SEPTEMBER 19, 2023

Researchers discovered approximately 12,000 Juniper SRX firewalls and EX switches vulnerable to a recently disclosed CVE-2023-36845 RCE flaw. VulnCheck researchers discovered approximately 12,000 internet-exposed Juniper SRX firewalls and EX switches that are vulnerable to the recently disclosed remote code execution flaw CVE-2023-36845.

Firewall

Firewall Internet Internet Authentication

Over 178,000 SonicWall next-generation firewalls (NGFW) online exposed to hack

Security Affairs

JANUARY 15, 2024

Researchers from Bishop Fox found over 178,000 SonicWall next-generation firewalls (NGFW) publicly exploitable. Researchers from Bishop Fox used BinaryEdge source data to find SonicWall firewalls with management interfaces exposed to the internet.

Firewall

Firewall Hacking Firmware Internet

New Open SSH Vulnerability

Schneier on Security

JULY 3, 2024

Moreover, gaining root access would enable attackers to bypass critical security mechanisms such as firewalls, intrusion detection systems, and logging mechanisms, further obscuring their activities.

Firewall

Firewall Data breaches Malware Risk

Quantum Threats and How to Protect Your Data

SecureWorld News

DECEMBER 8, 2024

This approach poses a significant threat, as sensitive information transmitted today could be decrypted in the future. For example, in the financial sector, if a quantum computer breaks encryption on data in transit, a threat actor could access confidential information, resulting in severe financial and reputational damage.

Encryption

Encryption Firewall Firmware Education

Palo Alto Networks warns that CVE-2025-0111 flaw is actively exploited in attacks

Security Affairs

FEBRUARY 19, 2025

Palo Alto Networks warns that the vulnerability CVE-2025-0111 is actively exploited with two other flaws to compromise PAN-OS firewalls. Palo Alto Networks warns that threat actors are chaining the vulnerability CVE-2025-0111 with two other vulnerabilities, tracked as CVE-2025-0108 with CVE-2024-9474 , to compromise PAN-OS firewalls.

Firewall

Firewall Authentication Architecture Internet

Experts found rogue devices, including hidden cellular radios, in Chinese-made power inverters used worldwide

Security Affairs

MAY 18, 2025

“While inverters are built to allow remote access for updates and maintenance, the utility companies that use them typically install firewalls to prevent direct communication back to China.” ” reported Reuters. experts who strip down equipment hooked up to grids to check for security issues, the two people said.”

Energy and Utilities

Energy and Utilities Manufacturing Government Hacking

Muddling Meerkat, a mysterious DNS Operation involving China’s Great Firewall

Security Affairs

MAY 1, 2024

The threat actors appear to have the capability to control China’s Great Firewall and were observed utilizing a novel technique involving fake DNS MX records. The experts noticed a spike in activity observed in September 2023. However, the Infoblox researchers have yet to discover the motivation behind the attacks.

DNS

DNS Firewall DDOS Hacking

Cisco fixed tens of vulnerabilities, including an actively exploited one

Security Affairs

OCTOBER 24, 2024

Cisco addressed multiple vulnerabilities in Adaptive Security Appliance (ASA), Secure Firewall Management Center (FMC), and Firepower Threat Defense (FTD) products, including an actively exploited flaw tracked as CVE-2024-20481. The vulnerability CVE-2024-20481 (CVSS score of 5.8)

VPN

VPN Firewall Passwords Software

Cisco warns of password-spraying attacks targeting Secure Firewall devices

Security Affairs

MARCH 29, 2024

Cisco warns customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services of Cisco Secure Firewall devices. Cisco is warning customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices.

Firewall

Firewall Passwords VPN Authentication

Cybersecurity Firm Imperva Discloses Breach

Krebs on Security

AUGUST 27, 2019

Imperva , a leading provider of Internet firewall services that help Web sites block malicious cyberattacks, alerted customers on Tuesday that a recent data breach exposed email addresses, scrambled passwords, API keys and SSL certificates for a subset of its firewall users. Redwood Shores, Calif.-based Image: Imperva.

Cybersecurity

Cybersecurity Firewall Passwords Data breaches

News alert: Knocknoc raises seed funding to scale its just-in-time network access control technology

The Last Watchdog

MARCH 19, 2025

Customers use Knocknoc to protect VPNs and firewalls, IP cameras, payroll systems, file transfer appliances, bastion hosts and other applications and network services. About Knocknoc: For more information at [link] Media Contact: Adam Pointon, Cofounder & CEO, Knocknoc.io, hello@knocknoc.io

Technology

Technology Telecommunications Media Firewall

Juniper Networks fixed a critical RCE bug in its firewalls and switches

Security Affairs

JANUARY 12, 2024

Juniper Networks fixed a critical pre-auth remote code execution (RCE) flaw, tracked as CVE-2024-21591, in its SRX Series firewalls and EX Series switches. ” reads the advisory published by the vendor. “This issue is caused by use of an insecure function allowing an attacker to overwrite arbitrary memory.”

Firewall

Firewall Hacking Software Information Security

News alert: INE Security shares cyber hygiene guidance for small- and medium-sized businesses

The Last Watchdog

OCTOBER 23, 2024

INE Security advises businesses to secure their network by using firewalls, encrypting data, and regularly updating security software. outside the house or business facility) For more information about cybersecurity training programs that can help protect small business, users can visit security.ine.com.

Small Business

Small Business Data breaches Backups Passwords

Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors

Security Affairs

MAY 24, 2024

Introduction to TLS and Certificate Transparency Log Securing Internet communications is crucial for maintaining the confidentiality and integrity of information in transit. Although the Certificate Transparency Log is designed to improve security and transparency, its public nature leads to known Information Disclosure risks.

DNS

DNS Firewall Manufacturing Internet

U.S. CISA adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

NOVEMBER 7, 2024

Palo Alto Networks Expedition is a tool designed to help users transition to and optimize Palo Alto Networks’ next-generation firewalls. It assists with the migration of configurations from other firewall vendors and legacy Palo Alto Networks devices to newer models.

Firewall

Firewall Authentication Accountability Risk

Attackers exploited SonicWall SMA appliances since January 2025

Security Affairs

APRIL 19, 2025

. “It is important to note that even fully patched firewall devices may still become compromised if accounts use poor password hygiene.” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,Remote Code Execution)

Firewall

Firewall Passwords VPN Accountability

Nation-state actors exploited two zero-days in ASA and FTD firewalls to breach government networks

Security Affairs

APRIL 24, 2024

Nation-state actor UAT4356 has been exploiting two zero-days in ASA and FTD firewalls since November 2023 to breach government networks. Additionally, the Line Runner was observed retrieving staged information facilitated by the Line Dancer component.

Firewall

Firewall Government VPN Hacking

Video: How Hackers Steal Your Cookies & How to Stop Them

eSecurity Planet

NOVEMBER 6, 2024

Cookies play a crucial role in enhancing your online experience, but they can also be exploited by cybercriminals to access sensitive information. Deploy Malware Once malware is on your device, it can extract sensitive data, including personal information. Session Hijacking Attackers can take over your session by collecting cookies.

Identity Theft

Identity Theft Passwords Phishing Accountability

8 security tips for small businesses

Malwarebytes

NOVEMBER 6, 2024

A stolen or lost device is stressful enough without having to worry about confidential information. Use a firewall and VPN A firewall protects an entry point to a network while a VPN creates an encrypted tunnel between two networks. Know what legal body you need to inform in case of a breach.

Small Business

Small Business Backups Firewall VPN

International law enforcement operation dismantled RedLine and Meta infostealers

Security Affairs

OCTOBER 29, 2024

“Through Eurojust, authorities were able to quickly exchange information and coordinate actions to take down the infostealers.” Update software : Keep your operating system, security software, and firewall up to date to patch vulnerabilities. ” reads the press release published by Eurojust.

Identity Theft

Identity Theft Malware Passwords Banking

Columbus Ransomware Attack Exposes 500,000+ Residents’ Data: How to Stay Safe

eSecurity Planet

NOVEMBER 6, 2024

In a stunning blow to the city’s cybersecurity defenses, Columbus, Ohio, recently became the target of a massive cyberattack that exposed over half a million residents’ sensitive information. terabytes of sensitive information compromised, the breach affected approximately 500,000 residents, nearly 55% of the city’s population.

Ransomware

Ransomware Authentication Identity Theft Penetration Testing

U.S. CISA adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

DECEMBER 3, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog. Attackers can use malformed XML requests to access arbitrary server files containing account information. appears to have been exploited by attackers in the wild.

Firewall

Firewall Authentication Accountability Firmware

American Water Shuts Down Services After Cybersecurity Breach

eSecurity Planet

OCTOBER 15, 2024

Strengthen Perimeter Defenses Firewalls and intrusion detection systems (IDS): Firewalls are the first line of defense, blocking unauthorized access to the network, while IDS helps monitor network traffic for suspicious activity. Here are key strategies to prevent cyberattacks like the American Water cyber breach.

Cybersecurity

Cybersecurity Penetration Testing Cyber threats Firewall

What We Can Learn from the Capital One Hack

Krebs on Security

AUGUST 2, 2019

But new information indicates the methods she deployed have been well understood for years. The misconfiguration of the WAF allowed the intruder to trick the firewall into relaying requests to a key back-end resource on the AWS platform. He also acknowledged that doing so could break a lot of backwards compatibility within AWS.

Hacking

Hacking Firewall Data breaches Software

What Is a Firewall and Do you Need One?

U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog

Trending Sources

More than 2,000 Palo Alto Networks firewalls hacked exploiting recently patched zero-days

Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug

Zyxel firewalls targeted in recent ransomware attacks

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

Sophos fixed critical vulnerabilities in its Firewall product

SonicWall warns of an exploitable SonicOS vulnerability

Palo Alto Networks confirmed active exploitation of recently disclosed zero-day

Palo Alto Networks warns of potential RCE in PAN-OS management interface

Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices

SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks

Palo Alto Networks fixed a high-severity PAN-OS flaw

U.S. CISA adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog

Fog and Akira ransomware attacks exploit SonicWall VPN flaw CVE-2024-40766

Palo Alto Networks fixed multiple DoS bugs in its firewalls

SonicWall addressed an improper access control issue in its firewalls

Multiple flaws in pfSense firewall can lead to arbitrary code execution

Palo Alto fixed critical flaws in PAN-OS firewalls that allow for full compromise of the devices

Zyxel fixed four bugs in firewalls and access points

12,000 Juniper SRX firewalls and EX switches vulnerable to CVE-2023-36845

Over 178,000 SonicWall next-generation firewalls (NGFW) online exposed to hack

New Open SSH Vulnerability

Quantum Threats and How to Protect Your Data

Palo Alto Networks warns that CVE-2025-0111 flaw is actively exploited in attacks

Experts found rogue devices, including hidden cellular radios, in Chinese-made power inverters used worldwide

Muddling Meerkat, a mysterious DNS Operation involving China’s Great Firewall

Cisco fixed tens of vulnerabilities, including an actively exploited one

Cisco warns of password-spraying attacks targeting Secure Firewall devices

Cybersecurity Firm Imperva Discloses Breach

News alert: Knocknoc raises seed funding to scale its just-in-time network access control technology

Juniper Networks fixed a critical RCE bug in its firewalls and switches

News alert: INE Security shares cyber hygiene guidance for small- and medium-sized businesses

Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors

U.S. CISA adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog

Attackers exploited SonicWall SMA appliances since January 2025

Nation-state actors exploited two zero-days in ASA and FTD firewalls to breach government networks

Video: How Hackers Steal Your Cookies & How to Stop Them

8 security tips for small businesses

International law enforcement operation dismantled RedLine and Meta infostealers

Columbus Ransomware Attack Exposes 500,000+ Residents’ Data: How to Stay Safe

U.S. CISA adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog

American Water Shuts Down Services After Cybersecurity Breach

What We Can Learn from the Capital One Hack

Stay Connected