Firmware, Risk and VPN - Cyber Security Informer

SonicWall warns of an exploitable SonicOS vulnerability

Security Affairs

JANUARY 8, 2025

” SonicWall is urging customers to upgrade the SonicOS firmware of their firewalls to patch an authentication bypass vulnerability tracked as CVE-2024-53704 (CVSS score of 8.2). The vulnerability resides in SSL VPN and SSH management and according to the vendor is “susceptible to actual exploitation.”

Firewall

Firewall Firmware VPN Authentication

CISA Order Highlights Persistent Risk at Network Edge

Krebs on Security

JUNE 15, 2023

.” Meanwhile, this week we learned more details about the ongoing exploitation of a zero-day flaw in a broad range of virtual private networking (VPN) products made by Fortinet — devices many organizations rely on to facilitate remote network access for employees. “Patch your #Fortigate.” “Patch your #Fortigate.”

Risk

Risk VPN Internet Internet

Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide

Security Affairs

NOVEMBER 2, 2024

Successful exploitation of these vulnerabilities could allow attackers to steal sensitive data, inject firmware payloads, and even reach LAN-connected devices. Sophos identified and publicly disclosed these attacks, including campaigns like Asnarök and “Personal Panda,” while warning vulnerable organizations of the risks.

Firmware

Firmware Government Firewall Malware

Threat Modeling in Solar Power Infrastructure

SecureWorld News

JUNE 18, 2025

When renewable energy becomes a security risk Some people are concerned about whether solar panels will operate after periods of cloudy weather, others are more concerned about whether they can be remotely accessed. Use boot verification and firmware integrity checks to detect unauthorized modifications. Yes, you read that right.

Firmware

Firmware Manufacturing IoT Mobile

DarkHotel APT uses VPN zero-day in attacks on Chinese government agencies

Security Affairs

APRIL 6, 2020

DarkHotel nation-state actor is exploiting a VPN zero -day to breach Chinese government agencies in Beijing and Shanghai. State-sponsored hackers used a zero-day vulnerability in Sangfor SSL VPN servers to gain access to victims’ networks. Up to now, a large number of VPN users have been attacked.”

VPN

VPN Government Advertising Firmware

U.S. CISA adds SonicWall SonicOS and Palo Alto PAN-OS flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

FEBRUARY 18, 2025

The company warns that the risk is higher if the management interface is accessible from the internet or an untrusted network, directly or via a dataplane interface with a management profile. The security vendor recommends restricting access to trusted internal IP addresses to minimize the risk of exploitation. h4 >= 11.2.4-h4

Firewall

Firewall Firmware Authentication VPN

HelloKitty ransomware gang targets vulnerable SonicWall devices

Security Affairs

JULY 18, 2021

x firmware in an imminent ransomware campaign using stolen credentials.” The exploitation targets a known vulnerability that has been patched in newer versions of firmware.”. The network equipment vendor is now urging customers to update the firmware of their devices as soon as possible. reads the alert published by the company.

Ransomware

Ransomware Firmware Mobile InfoSec

SonicWall warns of ‘imminent ransomware’ attacks on its EOL products

Security Affairs

JULY 15, 2021

x firmware in an imminent ransomware campaign using stolen credentials.” “The exploitation targets a known vulnerability that has been patched in newer versions of firmware.” The network equipment vendor is now urging customers to update the firmware of their devices as soon as possible. “If 34 or 9.0.0.10

Firmware

Firmware Ransomware Passwords Mobile

U.S. CISA adds SonicWall SMA100 and Apache HTTP Server flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

MAY 2, 2025

is an improper neutralization of special elements in the SMA100 SSL-VPN management interface. SMA100 devices updated with the fixed firmware version 10.2.1.14-75sv An attacker can exploit the flaw to map URLs to file system locations that are permitted to be served by the server CVE-2023-44221 (CVSS score: 7.2)

Firmware

Firmware Authentication VPN Mobile

The Edge Has Become the Battleground

SecureWorld News

MAY 21, 2025

Governance pressure joining technology risk Capitol Hill is circulating a draft "Cyber Hygiene Safe Harbor" bill: firms demonstrating secure-by-design practices would gain liability shields after nation-state incidents. Legacy edge risk is invisible in classic dashboards. Legal and operational risk are converging.

Firmware

Firmware Digital transformation Technology Risk

New DNS Spoofing Threat Puts Millions of Devices at Risk

eSecurity Planet

MAY 3, 2022

According to the researchers, the affected devices are “well-known IoT devices running the latest firmware.” Admins need to apply the latest updates to all vendors and watch for the next firmware releases. VPN providers now offer interesting security features that can block known malware and mitigate MITM attacks significantly.

DNS

DNS Risk Firmware IoT

Zyxel patches two critical vulnerabilities

Malwarebytes

MAY 26, 2023

The CVEs patched in these updates are: CVE-2023-33009 : A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.32 Patch 1, USG FLEX series firmware versions 4.50 Patch 1, USG FLEX 50(W) firmware versions 4.25 Patch 1, USG20(W)-VPN firmware versions 4.25

Firmware

Firmware VPN Firewall Accountability

SonicWall warns users of “imminent ransomware campaign”

Malwarebytes

JULY 15, 2021

The exploitation targets a known vulnerability that has been patched in newer versions of SonicWall firmware. Devices at risk. x versions of the firmware. x firmware. x firmware versions. SSL-VPN 200/2000/400 (EOL 2013/2014) disconnect immediately and reset passwords. Mitigation. 34 or 9.0.0.10

Ransomware

Ransomware Firmware VPN Firewall

CVE-2021-40847 flaw in Netgear SOHO routers could allow remote code execution

Security Affairs

SEPTEMBER 22, 2021

The flaw, tracked as CVE-2021-40847, resides in the source of a third-party component included in the firmware of many Netgear devices. “For many organizations, SOHO devices typically fly under the radar when it comes to cybersecurity risk management. ” concludes the report. ” concludes the report. Pierluigi Paganini.

DNS

DNS Firmware VPN Risk

NSA, CISA Release Guidance for Choosing and Hardening VPNs

eSecurity Planet

OCTOBER 1, 2021

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have released guidance and best practices for securing virtual private network (VPN) solutions. What might be most striking about the document is how many security steps and solutions it takes to properly secure VPN connections.

VPN

VPN Authentication Passwords Software

A critical flaw in industrial automation systems opens to remote hack

Security Affairs

NOVEMBER 29, 2020

Experts was that vendors may have bought vulnerable versions of this stack before the 2012 update and are still using it in their firmware. “However, many vendors may have bought vulnerable versions of this stack prior to the 2012 update, starting in the early 2000s when it was first issued, and integrated it into their own firmware.

Hacking

Hacking Firmware Internet Internet

335,923 out of 489,337 Fortinet firewalls vulnerable to CVE-2023-27997

Security Affairs

JULY 3, 2023

Researchers reported that there are 490,000 Fortinet firewalls exposing SSL VPN interfaces on the internet, and roughly 69% of them are still vulnerable to CVE-2023-27997. For this reason, if the customer has SSL-VPN enabled, Fortinet is advising customers to take immediate action to upgrade to the most recent firmware release.

Firewall

Firewall VPN Firmware Internet

Update now! ASUS fixes nine security flaws

Malwarebytes

JUNE 19, 2023

ASUS has released firmware updates for several router models fixing two critical and several other security issues. You will find the latest firmware available for download from the ASUS support page or the appropriate product page. The Asuswrt-Merlin New Gen is an open source firmware alternative for Asus routers.

Firmware

Firmware VPN Risk Cybersecurity

A mysterious code prevents QNAP NAS devices to be updated

Security Affairs

FEBRUARY 11, 2019

“Since recent firmware updates, the ClamAV Antivirus fails to update due to 700+ clamav.net entries in /etc/hosts, all set to 0.0.0.0 “Exposing your NAS on the internet (allowing remote access) is always a high risk thing to do (at least without a properly deployed remote access VPN and/or 2FA on all existing user accounts)!”

Antivirus

Antivirus Advertising Firmware Manufacturing

CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog

Security Affairs

MAY 17, 2022

According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities , FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog. USG FLEX 50(W) / USG20(W)-VPN ZLD V5.10 VPN series ZLD V4.60

Firewall

Firewall VPN Firmware Internet

Multiple DDoS botnets were observed targeting Zyxel devices

Security Affairs

JULY 22, 2023

The cause of the vulnerability is the improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35. ” concludes the report.

DDOS

DDOS Firmware VPN Firewall

What does WiFi stand for?

Malwarebytes

MAY 13, 2021

In public, using shared WiFi carries risks (more on that below). If you have to use public WiFi hotspots, it’s wise to also use a VPN to keep your activity private while you use that connection. Use a modern router if you can because an old router can be a security risk. How to reduce public WiFi security risks.

Wireless

Wireless VPN Internet Internet

A flaw in Rockwell Controller allows attackers to redirect users to malicious Sites

Security Affairs

APRIL 25, 2019

Rockwell has released firmware updates that address the vulnerability for the affected controllers. Below the recommendations published by Rockwell Automation to minimize the risk of exploitation of this vulnerability: Update to the latest available firmware revision that addresses the associated risk.

Firmware

Firmware Social Engineering Advertising Malware

Fortinet urges to patch the critical RCE flaw CVE-2023-27997 in Fortigate firewalls

Security Affairs

JUNE 13, 2023

“A heap-based buffer overflow vulnerability [CWE-122] in FortiOS and FortiProxy SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.” If the customer is not operating SSL-VPN the risk of this issue is mitigated – however, Fortinet still recommends upgrading.”

Firewall

Firewall VPN Firmware Manufacturing

5 Signs a Cyberattack Is Under Way and 5 Things You Need to Do Before It Happens

Adam Levin

FEBRUARY 10, 2020

Here are five things you should do today to decrease the risk of a cyberattack affecting your life or your company directly. Always consider if the convenience afforded by an insecure practice, device, or service is worth the risk and err on the side of security. Reduce Your Attackable Surface. Update Everything.

Passwords

Passwords Phishing Password Management Accountability

Keep Calm and Check Your Public Wi-Fi Connection

Approachable Cyber Threats

JANUARY 17, 2023

Risk Level. A publicly available network may not always have the latest firmware, patch updates on its hardware, or have proper encryption enabled; therefore, if you connect to the network you may be exposing yourself to potential risks. What are the potential risks?” Category Awareness, Guides.

Encryption

Encryption Internet Internet VPN

CISA is warning of vulnerabilities in GE Power Management Devices

Security Affairs

MARCH 23, 2021

“GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10, or greater to resolve these vulnerabilities. “CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.” ” continues the alert.

Firmware

Firmware VPN Firewall Risk

The Biggest Lessons about Vulnerabilities at RSAC 2021

eSecurity Planet

MAY 28, 2021

Department of Homeland Security is the Cybersecurity and Infrastructure Security Agency (CISA), charged with being the nation’s risk advisor for cyber and physical risk and working to strengthen national security resilience. From BIOS and firmware to UEFI code, VBOS is an attack vector that requires more attention.

Software

Software DNS Firmware VPN

FBI warns of ransomware attacks targeting the food and agriculture sector

Security Affairs

SEPTEMBER 3, 2021

Install updates/patch operating systems, software, and firmware as soon as they are released. Consider installing and using a VPN. Regularly provide users with training on information security principles and techniques as well as overall emerging cybersecurity risks and vulnerabilities (i.e. ransomware and phishing scams).

Ransomware

Ransomware Passwords Backups Firmware

Defending Against Misconfigured MFA & PrintNightmare Vulnerabilities

eSecurity Planet

MARCH 21, 2022

They then authenticated to the victim’s VPN to initiate a remote desktop protocol (RDP) connection to the domain controllers. Applying the patches does not eliminate all risks but not doing so would be a significant risk. When possible, implement multi-factor authentication on all VPN connections.

VPN

VPN Accountability Authentication Passwords

Two critical flaws affect CODESYS ICS Automation Software

Security Affairs

JUNE 27, 2022

Two of these vulnerabilities, tracked as CVE-2022-31805 and CVE-2022-31806, have been rated critical (CVSS scores: 9.8), 7 as high risk, and 2 as medium risk. However, many vendors who use CODESYS V2 runtime have not yet updated in time, in which case factories using these affected products are still in serious risk.”

Software

Software Manufacturing Firmware Risk

FBI warns of ransomware threat to food and agriculture

Malwarebytes

SEPTEMBER 3, 2021

Agriculture may not be the first industry you associate with cybersecurity problems, but we all need to aware of the risks created by connecting this ancient part of our food supply chain to the Internet. Install updates/patch operating systems, software, and firmware as soon as they are released. Consider installing and using a VPN.

Ransomware

Ransomware Manufacturing Passwords Internet

Avoslocker ransomware gang targets US critical infrastructure

Security Affairs

MARCH 19, 2022

Install updates/patch operating systems, software, and firmware as soon as updates/patches are released. Consider installing and using a VPN. Regularly provide users with training on information security principles and techniques as well as overall emerging cybersecurity risks and vulnerabilities (i.e.,

Ransomware

Ransomware DDOS Passwords Backups

Spyware in the IoT – the Biggest Privacy Threat This Year

SiteLock

AUGUST 27, 2021

When not secured properly on their own Wi-Fi channel, IoT devices can be more than an inconvenience, they can be seen as a critical security risk due to the poor security protocols like fixed default passwords. To help avoid these online risks, it is highly recommended to use a Virtual Private Network (VPN). Think again.

IoT

IoT Spyware VPN Passwords

FBI warns of increase in PYSA ransomware attacks targeting education

Malwarebytes

MARCH 17, 2021

To prevent attacks: Install security updates for operating systems, software, and firmware as soon as they are released. Consider installing and using a VPN. Provide users with training on information security principles and techniques as well as emerging cybersecurity risks. Use multi-factor authentication wherever possible.

Education

Education Ransomware Phishing Passwords

2022 zero day was used to raid Fortigate firewall configs. Somebody just released them.

DoublePulsar

JANUARY 15, 2025

Each folder then contains an IP address, and each IP address contains config.confa full Fortigate config dumpand vpn-users.txt, a plaintext list of credentials. If you are in scope, may need to change device credentials and assess risk of firewall rules being publicly available. Or not, the choice isyours. Somebody just released them.

Firewall

Firewall VPN Passwords Firmware

Cybersecurity Agencies Reveal the Top Exploited Vulnerabilities of 2021

eSecurity Planet

APRIL 28, 2022

Web-Facing Systems at Risk. Malicious actors tend to focus on internet-facing systems to gain entry into a network, such as email and virtual private network (VPN) servers, using exploits targeting newly disclosed vulnerabilities. Also read: Best Patch Management Software & Tools. “U.S.,

Cybersecurity

Cybersecurity Software Firmware Internet

Remote Command Execution and Information disclosure flaws affect dozens of D-Link routers

Security Affairs

JANUARY 3, 2020

“In order for this security exploit to be done a malicious user would have to get access to the LAN-side or in-home access to the device which narrows the risk of an attack considerably. .” reads the advisory published by D-Link. Regardless we appreicate the 3rd parties report, confirmmed and released patches to close this issue.””

Advertising

Advertising Firmware VPN Authentication

CISA warns of critical flaws in Prima FlexAir access control system

Security Affairs

JULY 31, 2019

The flaws, reported by Gjoko Krstic of Applied Risk, could be easily exploited by remote attackers to gain full system access on affected systems, the issues affect Prima FlexAir Versions 2.3.38 “To update to the latest firmware, each user should select the “Check for Upgrade” option in the “Centrals” menu in the GUI.

Backups

Backups Authentication Advertising Firmware

Ransomware and Cyber Extortion in Q4 2024

Digital Shadows

JANUARY 14, 2025

The risk is further heightened by the wide range of tactics and techniques these groups employ, complicating defense efforts against potential attacks. Take Action To mitigate these threats, organizations should ensure SonicWall and other VPN products are fully patched and up to date.

Ransomware

Ransomware Social Engineering Phishing Manufacturing

Internet safety tips for kids and teens: A comprehensive guide for the modern parent

Malwarebytes

SEPTEMBER 21, 2021

If connecting to a public Wi-Fi can’t be avoided, advise them to use a virtual public network (VPN). If your kid does this, it not only puts their data at risk, but also opens the door for abuse. Update your child’s device’s firmware. Don’t share passwords with anyone. And we mean, anyone—including friends.

Internet

Internet Internet Passwords Password Management

Hurrah – It’s (patch) Tuesday!

IT Security Guru

MAY 10, 2021

This past years’ bout of VPN related breaches is a great example, especially as patches were available over a year ago. Although traditional application software and operating system vulnerabilities are the most prevalent, firmware within hardware is not immune. Growing threat.

VPN

VPN Software InfoSec Firmware

OpenSSH trojan campaign targets Linux systems and IoT devices

Malwarebytes

JUNE 26, 2023

Poorly configured Linux and Internet of Things (IoT) devices are at risk of compromise from a cryptojacking campaign , according to researchers at Microsoft. Maintain device health with updates: Make sure devices are up to date with the latest firmware and patches. When possible, update OpenSSH to the latest version.

IoT

IoT Adware Firmware Internet

Threat spotlight: Conti, the ransomware used in the HSE healthcare attack

Malwarebytes

MAY 28, 2021

It’s also knowingly putting lives at risk to satisfy a deep, insatiable want for money. Install updates/patch operating systems, software, and firmware as soon as they are released. Consider installing and using a VPN. HSE head Paul Reid estimates that the cost of restoring and updating its systems could reach €100m.

Healthcare

Healthcare Ransomware Encryption Passwords

SonicWall warns of an exploitable SonicOS vulnerability

CISA Order Highlights Persistent Risk at Network Edge

Trending Sources

Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide

Threat Modeling in Solar Power Infrastructure

DarkHotel APT uses VPN zero-day in attacks on Chinese government agencies

U.S. CISA adds SonicWall SonicOS and Palo Alto PAN-OS flaws to its Known Exploited Vulnerabilities catalog

HelloKitty ransomware gang targets vulnerable SonicWall devices

SonicWall warns of ‘imminent ransomware’ attacks on its EOL products

U.S. CISA adds SonicWall SMA100 and Apache HTTP Server flaws to its Known Exploited Vulnerabilities catalog

The Edge Has Become the Battleground

New DNS Spoofing Threat Puts Millions of Devices at Risk

Zyxel patches two critical vulnerabilities

SonicWall warns users of “imminent ransomware campaign”

CVE-2021-40847 flaw in Netgear SOHO routers could allow remote code execution

NSA, CISA Release Guidance for Choosing and Hardening VPNs

A critical flaw in industrial automation systems opens to remote hack

335,923 out of 489,337 Fortinet firewalls vulnerable to CVE-2023-27997

Update now! ASUS fixes nine security flaws

A mysterious code prevents QNAP NAS devices to be updated

CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog

Multiple DDoS botnets were observed targeting Zyxel devices

What does WiFi stand for?

A flaw in Rockwell Controller allows attackers to redirect users to malicious Sites

Fortinet urges to patch the critical RCE flaw CVE-2023-27997 in Fortigate firewalls

5 Signs a Cyberattack Is Under Way and 5 Things You Need to Do Before It Happens

Keep Calm and Check Your Public Wi-Fi Connection

CISA is warning of vulnerabilities in GE Power Management Devices

The Biggest Lessons about Vulnerabilities at RSAC 2021

FBI warns of ransomware attacks targeting the food and agriculture sector

Defending Against Misconfigured MFA & PrintNightmare Vulnerabilities

Two critical flaws affect CODESYS ICS Automation Software

FBI warns of ransomware threat to food and agriculture

Avoslocker ransomware gang targets US critical infrastructure

Spyware in the IoT – the Biggest Privacy Threat This Year

FBI warns of increase in PYSA ransomware attacks targeting education

2022 zero day was used to raid Fortigate firewall configs. Somebody just released them.

Cybersecurity Agencies Reveal the Top Exploited Vulnerabilities of 2021

Remote Command Execution and Information disclosure flaws affect dozens of D-Link routers

CISA warns of critical flaws in Prima FlexAir access control system

Ransomware and Cyber Extortion in Q4 2024

Internet safety tips for kids and teens: A comprehensive guide for the modern parent

Hurrah – It’s (patch) Tuesday!

OpenSSH trojan campaign targets Linux systems and IoT devices

Threat spotlight: Conti, the ransomware used in the HSE healthcare attack

Stay Connected