Troy Hunt

SEPTEMBER 18, 2020

More IoT, more cyber and more Q&A so yeah, business as usual this week. More specifically, a lot of this week's update talks about VPNs and where they still make sense with so much HTTPS all over the place these days. Sponsored by: safepass.me

VPN 256

VPN IoT Passwords Ransomware 256

Malwarebytes

JUNE 26, 2023

Poorly configured Linux and Internet of Things (IoT) devices are at risk of compromise from a cryptojacking campaign , according to researchers at Microsoft. Use least-privileges access: Use a secure virtual private network (VPN) service for remote access and restrict remote access to the device.

IoT 79

IoT Adware Firmware DDOS 79

Threatpost

SEPTEMBER 25, 2020

The client's default configuration for SSL-VPN has a certificate issue, researchers said.

VPN 99

VPN Authentication IoT 99

CyberSecurity Insiders

APRIL 15, 2021

.–(BUSINESS WIRE)– #IoTSecurity–The ioXt Alliance, the Global Standard for IoT security, today announced that it is expanding its ioXt Compliance Program with a new mobile application profile with added requirements for virtual private network (VPN) applications.

VPN 40

VPN Mobile IoT Technology 40

eSecurity Planet

JANUARY 11, 2024

This category also includes routers, switches, and Internet of Things (IoT) devices that can’t install traditional endpoint protection such as antivirus (AV) or endpoint detection and response (EDR) solutions. NGFWs can decrypt and inspect VPN traffic to monitor file exfiltration as well as detect increased and anomalous traffic.

Ransomware 112

Ransomware Encryption IoT VPN 112

Security Affairs

DECEMBER 5, 2021

The researchers analyzed the network devices using IoT Inspector’s security platform, which checked for thousands of CVEs and security flaws. “Additional services that the devices offer besides routing – such as multimedia functions or VPN – tend to be outdated as well. ” reads the advisory published by the experts.

Manufacturing 140

Manufacturing IoT Firmware VPN 140

Malwarebytes

APRIL 6, 2023

When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as its connected devices.

IoT 94

IoT Social Engineering Passwords Internet 94

Google Security

APRIL 15, 2021

We’ve seen early interest from Internet of Things (IoT) and virtual private network (VPN) developers, however the standard is appropriate for any cloud connected service such as social, messaging, fitness, or productivity apps.

Mobile 143

Mobile VPN IoT Internet 143

eSecurity Planet

AUGUST 2, 2022

The Atlas VPN report said the number of new Linux malware samples collected soared by 646% from the first half of 2021 to the first half of 2022, from 226,334 samples to nearly 1.7 The Atlas VPN team used AV-ATLAS, a threat intelligence platform from AV-TEST Gmb, for its report. million malware samples in the first half of 2022.

Malware 137

Malware VPN Encryption Marketing 137

The Last Watchdog

DECEMBER 13, 2020

Many enterprises have accelerated their use of Virtual Private Network (VPN) solutions to support remote workers during this pandemic. However deploying VPNs on a wide-scale basis introduces performance and scalability issues. SASE then provides secure connectivity between the cloud and users, much as with a VPN.

B2C 214

B2C IoT B2B VPN 214

Security Affairs

NOVEMBER 26, 2021

Resecurity, a Los Angeles-based cybersecurity company has identified an active a zero-day vulnerability in the TP-Link device with model number TL-XVR1800L (Enterprise AX1800 Dual Band Gigabit Wi-Fi 6 Wireless VPN Router), which is primarily suited to enterprises.

IoT 140

IoT Wireless DDOS VPN 140

Security Affairs

DECEMBER 22, 2022

Microsoft Threat Intelligence Center (MSTIC) researchers discovered a new variant of the Zerobot botnet (aka ZeroStresser) that was improved with the capabilities to target more Internet of Things (IoT) devices. Adopt a comprehensive IoT security solution. The IT giant is tracking this cluster of threat activity as DEV-1061.

IoT 114

IoT DDOS Malware Firmware 114

The Last Watchdog

JULY 30, 2021

Then a global pandemic came along and laid bare just how brittle company VPNs truly are. Criminal hackers recognized the golden opportunity presented by hundreds of millions employees suddenly using a company VPN to work from home and remotely connect to an array of business apps. Two sweeping trends resulted: one bad, one good.

VPN 214

VPN Firewall Encryption Accountability 214

eSecurity Planet

APRIL 19, 2023

RADIUS and TACACS+ apply to specific types of endpoints, but the ZTNA-as-a-Service product works for all kinds of devices, including Bring-Your-Own-Device (BYOD) endpoints, Internet-of-Things (IoT) devices, operations technology (OT), industrial control systems (ICS), and industrial IoT (IIoT).

IoT 93

IoT Authentication VPN Backups 93

Krebs on Security

JULY 25, 2023

.” Lumen’s research team said the purpose of AVrecon appears to be stealing bandwidth – without impacting end-users – in order to create a residential proxy service to help launder malicious activity and avoid attracting the same level of attention from Tor-hidden services or commercially available VPN services. com, sscompany[.]net,

Malware 203

Malware VPN Internet Internet 203

CyberSecurity Insiders

NOVEMBER 8, 2022

However, the feature is available for a premium of $16 per year and includes a VPN access in the pay. From then, the company has been offering antivirus software, multi-cloud security, extended detection and response and anti-virus and IoT protection.

Mobile 101

Mobile Antivirus VPN IoT 101

Security Affairs

AUGUST 8, 2021

Ivanti fixed a critical code execution issue in Pulse Connect Secure VPN RansomEXX ransomware leaks files stolen from Italian luxury brand Zegna VMware addresses critical flaws in its products CVE-2021-20090 actively exploited to target millions of IoT devices worldwide RansomEXX ransomware hit computer manufacturer and distributor GIGABYTE.

VPN 98

VPN Ransomware Manufacturing IoT 98

Security Boulevard

JULY 7, 2023

PV OT: VPN PDQ! CVSS known since May 2022—but still exploitable on 400+ net-connected OT/ICS/SCADA systems. The post Contec SolarView: Critical Bug Unpatched After 14 MONTHS appeared first on Security Boulevard.

VPN 105

VPN CISO IoT Security Awareness 105

Security Affairs

OCTOBER 22, 2022

The Daixin Team group gains initial access to victims through virtual private network (VPN) servers. In one successful attack, the attackers likely exploited an unpatched vulnerability in the organization’s VPN server. In another compromise, the group leveraged on compromised credentials to access a legacy VPN server.

Ransomware 67

Ransomware VPN Cybercrime Accountability 67

SecureWorld News

DECEMBER 8, 2021

IoT Inspector , a European platform for IoT security analysis, and CHIP , a German IT magazine, recently discovered an alarming number of vulnerabilities in commonly used Wi-Fi routers. IoT Inspector discusses the most common vulnerabilities found: "Some of the security issues were detected more than once.

Manufacturing 75

Manufacturing IoT Firmware Small Business 75

Malwarebytes

JULY 5, 2021

Lil’ skimmer, the Magecart impersonator What is the WireGuard VPN protocol ? Last week on Malwarebytes Labs: Is it Game Over for VR Advergaming ? Stay safe, everyone!

Cyber Insurance 97

Cyber Insurance Social Engineering Scams Insurance 97

Krebs on Security

FEBRUARY 26, 2020

” The updated security advisory from Zyxel states the exploit works against its UTM, ATP, and VPN firewalls running firmware version ZLD V4.35 The Emotet guys have been historically targeting PCs, laptops and servers, but their venture now into IoT devices is very disturbing.”. Patch 0 through ZLD V4.35 Patch 0 are not affected.

Firewall 257

Firewall Firmware VPN IoT 257

eSecurity Planet

APRIL 14, 2023

Features Automated threat responses to indicators of compromise Centralized visibility and policy management of all endpoints — workstations, laptops, and internet of things (IoT) devices Bidirectional third party integration to improve security and auditing Firewalls: Checkpoint, Fortinet, Juniper, Palo Alto Networks, etc.

IoT 88

IoT VPN Firewall Authentication 88

Security Affairs

JANUARY 21, 2024

Patch it now! million cryptojacking scheme arrested in Ukraine Cybercrime Cryptojacker arrested in Ukraine over EUR 1.8

Artificial Intelligence 95

Artificial Intelligence VPN Hacking Firewall 95

Security Affairs

AUGUST 31, 2023

Leaked credentials could have been used for credential stuffing attacks, which try to log into companies’ internet-connected tools such as VPN portals, HR management platforms, or corporate emails. The data was publicly accessible for 5 months, as the leak was first indexed by IoT search engines on January 31st, 2023.

Backups 135

Backups Manufacturing Passwords Internet 135

Security Affairs

MARCH 16, 2021

“The IoT realm remains an easily accessible target for attackers. Security experts at Palo Alto Networks disclosed a series of attacks aimed at delivering a Mirai variant leveraging multiple vulnerabilities. “The attacks are still ongoing at the time of this writing.

Wireless 123

Wireless IoT DNS VPN 123

Security Affairs

SEPTEMBER 27, 2020

fitness chains Town Sports leaked online Group-IB detects a series of ransomware attacks by OldGremlin HOW DO PROVIDERS IMPLEMENT INTERNET BLOCKING IN BELARUS? Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

IoT 102

IoT Banking Advertising Ransomware 102

Krebs on Security

APRIL 18, 2023

Riley Kilmer is co-founder of Spur.us , a company that tracks thousands of VPN and proxy networks, and helps customers identify traffic coming through these anonymity services. In January 2023, the Faceless service website said it was willing to pay for information about previously undocumented security vulnerabilities in IoT devices.

Malware 234

Malware Passwords Accountability Advertising 234

Security Affairs

OCTOBER 18, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

VPN 76

VPN Surveillance Advertising Ransomware 76

Security Affairs

JULY 22, 2023

through 4.73, VPN series firmware versions 4.60 Since the vulnerability is in the VPN service, which is enabled by default on the WAN, we expect the actual number of exposed and vulnerable devices to be much higher.” The cause of the vulnerability is the improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60

DDOS 95

DDOS Firmware VPN Firewall 95

CyberSecurity Insiders

DECEMBER 21, 2022

With hybrid work, VPN and remote access will start to become greater network-based targets. Many security professionals have emphasized the importance of asset management for IoT and other internet-connected devices. More workers have returned to the office, with hybrid work increasingly the new normal.

Cybersecurity 135

Cybersecurity Education Scams Internet 135

CyberSecurity Insiders

DECEMBER 6, 2022

When employees aren’t in the office, they’re liable to engage in risky behaviors such as using unsecured WiFi without a VPN, leaving work devices unlocked in public places, and clicking on malicious emails. Companies should also provide clear channels for reporting suspicious incidents. The average American household has 22 connected devices.

Cybersecurity 129

Cybersecurity VPN Digital transformation Education 129

Threatpost

FEBRUARY 28, 2019

Cisco said that CVE-2019-1663, which has a CVSS score of 9.8, allows unauthenticated, remote attackers to execute arbitrary code.

Wireless 79

Wireless Firewall VPN IoT 79

CyberSecurity Insiders

FEBRUARY 16, 2021

There are risks associated with a remote workforce and the at-home use of business devices and IoT devices, but the right tools are available now to continuously manage these risks. This PC when connected, even via VPN, to the corporate network, could be a source of infection by sending malware onto the network and premises.

Cybersecurity 143

Cybersecurity IoT Malware Risk 143

Hacker Combat

APRIL 1, 2022

Hackers obtain access “usually through passwords and usernames that have never been changed,” the same applies to numerous Internet of Things (IoT) devices like smart-lighting structures and routers. Leaving the original credentials in IoT appliances and devices is not a new risk.

Passwords 110

Passwords Internet Internet Manufacturing 110

CyberSecurity Insiders

NOVEMBER 1, 2022

These can be mobile phones, workstations, desktop and laptop computers, tablet computers, smartphones, IoT devices, wearable smart devices, as well as virtual environments, among many others. Based on numbers from Statista , there will be over 40 billion connected devices by 2030, and most of these are IoT products.

IoT 120

IoT Antivirus Threat Detection Cyber threats 120

SC Magazine

APRIL 26, 2021

You can really make sure that you use this product across multiple things – RDP, VPN, email – all that are constantly being attacked,” said Sanders, noting that ABCWUA’s solution from Cisco and Duo Security processes over 12,000 authorizations per month. So far, “it’s been going really well,” she said.

CISO 82

CISO IoT VPN InfoSec 82