article thumbnail

Zyxel Firewalls and VPN Servers: Victims of a New Cyberattack

Heimadal Security

Zyxel, a network devices manufacturer from Taiwan, alerted its clients by e-mail of the fact that its products were targeted by threat actors. Cybercriminals’ focus stays on the Zyxel firewalls and VPN products. Have Only Zyxel Firewalls and VPN Been Compromised? In a Twitter shared post containing […].

VPN 87
article thumbnail

335,923 out of 489,337 Fortinet firewalls vulnerable to CVE-2023-27997

Security Affairs

Researchers reported that there are 490,000 Fortinet firewalls exposing SSL VPN interfaces on the internet, and roughly 69% of them are still vulnerable to CVE-2023-27997. For this reason, if the customer has SSL-VPN enabled, Fortinet is advising customers to take immediate action to upgrade to the most recent firmware release.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Fortinet urges to patch the critical RCE flaw CVE-2023-27997 in Fortigate firewalls

Security Affairs

. “A heap-based buffer overflow vulnerability [CWE-122] in FortiOS and FortiProxy SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.” If the customer is not operating SSL-VPN the risk of this issue is mitigated – however, Fortinet still recommends upgrading.”

article thumbnail

SonicWall warns customers about zero-day vulnerabilities

CSO Magazine

Firewall and network security appliance manufacturer SonicWall is urging customers to take preventive actions after its own systems were attacked through previously unknown vulnerabilities in some of its products. Sign up for CSO newsletters. ]. . Sign up for CSO newsletters. ]. To read this article in full, please click here

CSO 112
article thumbnail

Do Not Confuse Next Generation Firewall And Web Application Firewall

SiteLock

Moreover, even some representatives of companies manufacturing products positioned as NGFW commit this fault. "We Let us start with the abbreviations that define the categories of information security products: WAF stands for Web Application Firewall , NGFW stands for Next Generation Firewall. or "Why do we need WAF?"

article thumbnail

Crooks stole more than $1.5M worth of Bitcoin from General Bytes ATMs

Security Affairs

Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M GENERAL BYTES is the world’s largest Bitcoin, Blockchain, and Cryptocurrency ATM manufacturer. “Please keep your CAS behind a firewall and VPN. Terminals should also connect to CAS via VPN.

article thumbnail

China-linked APT Volt Typhoon remained undetected for years in US infrastructure

Security Affairs

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.