article thumbnail

DE:CODED – Firewall speeds and VPN risks

Security Boulevard

Show notes for series 2, episode 2 Is your firewall as fast as you think? Do you need a personal VPN? The post DE:CODED – Firewall speeds and VPN risks appeared first on SE Labs Blog. The post DE:CODED – Firewall speeds and VPN risks appeared first on Security Boulevard.

VPN 52
article thumbnail

Fortinet urges to patch a critical RCE flaw in Fortigate firewalls

Security Affairs

Fortinet released security updates to fix a critical security flaw in its FortiGate firewalls that lead to remote code execution. Fortinet has released security patches to address a critical security vulnerability, tracked as CVE-2023-27997, in its FortiGate firewalls. This is reachable pre-authentication, on every SSL VPN appliance.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

335,923 out of 489,337 Fortinet firewalls vulnerable to CVE-2023-27997

Security Affairs

Researchers reported that there are 490,000 Fortinet firewalls exposing SSL VPN interfaces on the internet, and roughly 69% of them are still vulnerable to CVE-2023-27997. For this reason, if the customer has SSL-VPN enabled, Fortinet is advising customers to take immediate action to upgrade to the most recent firmware release.

article thumbnail

Remote Workforce? Consider These Five Reasons to Offer a VPN To Remote Employees

Adam Levin

Here are five ways VPNs can keep remote employees secure. Better Network and Firewall Protection: By routing an employee’s internet traffic through your company network, you can provide the same firewalls and network-level protection that they’d have working at an office with robust cybersecurity defenses.

VPN 130
article thumbnail

CISA Order Highlights Persistent Risk at Network Edge

Krebs on Security

The directive applies to any networking devices — such as firewalls, routers and load balancers — that allow remote authentication or administration. The researchers found that just being able to reach the management interface for a vulnerable Fortinet SSL VPN appliance was enough to completely compromise the devices.

Risk 202
article thumbnail

Fortinet urges to patch the critical RCE flaw CVE-2023-27997 in Fortigate firewalls

Security Affairs

“A heap-based buffer overflow vulnerability [CWE-122] in FortiOS and FortiProxy SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.” If the customer is not operating SSL-VPN the risk of this issue is mitigated – however, Fortinet still recommends upgrading.”

article thumbnail

Next-Generation Firewalls: A comprehensive guide for network security modernization

CyberSecurity Insiders

The terms computer security, information security and cybersecurity were practically non-existent in the 1980s, but believe it or not, firewalls have existed in some form since that time. Over the years, the traditional firewall has transformed to meet the demands of the modern workplace and adapt to an evolving threat landscape.