Tag: firewall
-
(g+) Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich
Bei Firewalls, Routern und Industrieanlagen können Admins verwundbares PHP oft nicht selbst patchen. Selbst nach einem Update bleibt deshalb Handlungsbedarf. First seen on golem.de Jump to article: www.golem.de/news/sicherheitsluecke-in-der-firmware-php2shell-bleibt-in-firewalls-und-industriegeraeten-gefaehrlich-2611-214898.html
-
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/
-
Intranet absichern Wie Unternehmen ihre internen Daten schützen
Firewalls, E-Mail-Filter und Endpoint-Schutz gehören in den meisten Unternehmen längst zum Standard. Das Intranet hingegen bleibt bei der IT-Sicherheit oft außen vor, obwohl dort Personalrichtlinien, Prozessdokumentationen und das Mitarbeiterverzeichnis liegen. Wer den Datenschutz im Intranet ernst nimmt, behandelt die Plattform deshalb wie jedes andere geschäftskritische System und sichert sie ebenso konsequent ab. Welche Daten […]…
-
Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich
Bei Firewalls, Routern und Industrieanlagen können Admins verwundbares PHP oft nicht selbst patchen. Selbst nach einem Update bleibt deshalb Handlungsbedarf. First seen on golem.de Jump to article: www.golem.de/news/sicherheitsluecke-in-der-firmware-php2shell-bleibt-in-firewalls-und-industriegeraeten-gefaehrlich-2611-214898.html
-
11 Security Policy Management Tools: The 2026 Buyer’s Verdict Guide
“Security policy management” names two different markets wearing one label, and this roster contains both: network security policy management (NSPM) firewall rulebases, segmentation intent, change automation across hybrid estates and written-policy lifecycle the documents people must read, sign, and prove to auditors. Buying across the confusion wastes budget, so this verdict guide judges eleven tools…
-
Firewall im KI-Zeitalter: Warum der Alarm erst der Anfang ist
Die Firewall steht im Interview nicht als isolierte Schutzmauer im Mittelpunkt, sondern als Kontrollpunkt einer vernetzten Abwehr. Sven Janssen von Sophos erläutert, warum auf einen Alarm eine klare Zuständigkeit folgen muss, KI-Assistenten keine Freigabe ersetzen und integrierte Plattformen auch Abhängigkeiten schaffen. Für IT-Entscheider geht es damit um mehr als Technik: um nachvollziehbare Regeln, beherrschbare Automatisierung……
-
Absicherung von Netzwerken im KI-Zeitalter
Sophos hat neue Netzwerksicherheitsinnovationen vorgestellt, mit denen Unternehmen den Leistungs- und Sicherheitsanforderungen des KI-Zeitalters gerecht werden können. Im Mittelpunkt steht Sophos-Firewall v23, ergänzt durch neue XGS-Hardware, ein eigenständiges Sophos-NDR-Angebot und Erweiterungen im gesamten Netzwerkportfolio. Gemeinsam tragen sie über Sophos-Fusion, das AI-native Cybersecurity-Defense-System, stärkere Abwehrfunktionen für das KI-Zeitalter weiter in das Netzwerk. So erhalten Unternehmen die…
-
Absicherung von Netzwerken im KI-Zeitalter
Sophos hat neue Netzwerksicherheitsinnovationen vorgestellt, mit denen Unternehmen den Leistungs- und Sicherheitsanforderungen des KI-Zeitalters gerecht werden können. Im Mittelpunkt steht Sophos-Firewall v23, ergänzt durch neue XGS-Hardware, ein eigenständiges Sophos-NDR-Angebot und Erweiterungen im gesamten Netzwerkportfolio. Gemeinsam tragen sie über Sophos-Fusion, das AI-native Cybersecurity-Defense-System, stärkere Abwehrfunktionen für das KI-Zeitalter weiter in das Netzwerk. So erhalten Unternehmen die…
-
Fireperf: Open-source network testing tool for firewalls and routers
The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/03/fireperf-open-source-network-testing-tool/
-
Hackers Exploit PHP2Shell RCE Vulnerabilities to Gain Root Access on Palo Alto Firewalls
Attackers have chained critical PHP2Shell vulnerabilities with the Fragnesia Linux kernel flaw to gain root access on Palo Alto Networks PAN-OS systems. The campaign reportedly compromised 24 internet-facing firewalls before reaching an internal firewall management server, bringing the total to 25 compromised systems. Hunt.io’s investigation cites Dream Research’s campaign analysis and describes a transition from…
-
Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
The AI-enabled campaign hit two dozen targets, including sites linked to the U.S. government. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/palo-alto-networks-firewalls-compromised-chained-attacks-php2shell/873323/
-
Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit
Dream found that a suspected Chinese-nexus actor gained root access to Palo Alto Network firewall servers to target government organizations First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinese-us-government-chained-php2/
-
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Tags: cisa, cisco, cve, cybersecurity, dos, exploit, firewall, flaw, gitlab, infrastructure, kev, rce, remote-code-execution, software, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation.The vulnerabilities are listed below – CVE-2026-97229 (CVSS score: 10.0) – An integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise First seen on…
-
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Tags: cisa, cisco, cve, cybersecurity, dos, exploit, firewall, flaw, gitlab, infrastructure, kev, rce, remote-code-execution, software, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation.The vulnerabilities are listed below – CVE-2026-97229 (CVSS score: 10.0) – An integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise First seen on…
-
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn’t.There’s a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are using…
-
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the >>Fragnesia<< Linux kernel bug to root … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/29/php2shell-fragnesia-vmware-esx-zero-day/
-
New Cisco firewall zero-day exploited to crash SSL VPN devices
Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that attackers are exploiting to remotely crash vulnerable firewall devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisco-warns-of-firewall-zero-day-exploited-to-crash-ssl-vpn-devices/
-
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild.The vulnerability, tracked as CVE-2026-76418, is rated 8.6 on the CVSS scoring system. Successful exploitation could allow an unauthenticated, remote attacker to…
-
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
GitHub has announced that it’s introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time.”The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate,” GitHub said.The feature, which currently supports only npm packages, is available in public…
-
Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls
Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) software. This vulnerability, tracked as CVE-2026-76418, lets unauthenticated attackers trigger unexpected device reloads, causing a denial of service. The flaw is categorized as high severity, with…
-
Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 Firewall Servers
Tags: access, credentials, cyber, data-breach, exploit, firewall, flaw, government, hacker, linux, theft, vulnerabilityHackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems associated with a United States government-affiliated environment, according to Dream researchers. Discovered on October 25, the operation progressed from exposed firewall management interfaces to credential theft, persistent tunneling, and Active Directory reconnaissance. Dream recovered…
-
GitHub’s npm package firewall can block brand-new versions before they install
GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/github-package-firewall-npm/
-
InfraTrust report warns of exploited flaws in critical network infrastructure
Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as “PHP2Shell” put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/infratrust-report-warns-of-exploited-flaws-in-critical-network-infrastructure/
-
Firewalls unter Beschuss: Server der US-Regierung mittels PHP2Shell infiltriert
Chinesische Hacker sollen das Internet nach anfälligen Firewalls abgesucht und einige davon infiltriert haben – darunter solche der US-Regierung. First seen on golem.de Jump to article: www.golem.de/news/firewalls-unter-beschuss-server-der-us-regierung-mittels-php2shell-infiltriert-2610-214578.html
-
Check Point führt ‘Firewall-as-a-Subscription” ein
Mit einem einzigen Abonnement erhalten Unternehmen Zugang zur KI-gestützten Netzwerk-Firewall von Check Point, zur KI-gestützten Bedrohungsabwehr und zum agentenbasierten Management ganz ohne Anschaffungskosten für Hardware. Inflation und steigende Zinsen treiben die Kreditkosten in die Höhe und schrumpfen die Investitionsbudgets; für viele Unternehmen kann bereits eine einzige Zinserhöhung das Budget für eine geplante Firewall-Erneuerung zunichte […]…
-
Check Point startet Firewall-as-a-Subscription mit KI-Schutz und flexiblem Abonnement
Check Point startet Firewall-as-a-Subscription: KI-gestützte Netzwerksicherheit, Bedrohungsabwehr und Management ohne hohe Hardware-Investitionen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-startet-firewall-as-a-subscription-mit-ki-schutz-und-flexiblem-abonnement/a46925/
-
Cyberresilienz ist mehr als nur ein paar Security-Produkte
Cyberrisiken treffen nicht nur Konzerne, sondern insbesondere auch den Mittelstand. Entscheidend ist nicht allein, ob Firewall, Virenschutz und Backups vorhanden sind. Über das Überleben nach einem Angriff entscheidet, wie planvoll und effektiv ein Unternehmen reagiert. Sonntagabend, 22:40 Uhr: Das ERP fällt aus, E-Mail und Dateiserver sind nicht mehr erreichbar, Produktionsdaten und Auftragsverwaltung… First seen on…
-
Check Point Launches Firewall-as-a-Subscription as Cybersecurity Budgets Face Growing Pressure
Check Point Software Technologies has announced the launch of Firewall-as-a-Subscription, a new offering designed to make advanced AI-powered network security more accessible to organisations without requiring a significant upfront hardware investment. The new subscription model gives businesses access to Check Point Force Firewalls, AI-powered threat prevention and agentic security management through predictable monthly or annual…
-
OpenBSD 8.0 Released With Enhanced Firewall Security and Critical Vulnerability Fixes
OpenBSD 8.0 was released on October 20, 2026, marking the project’s 61st release. This update includes significant improvements, including enhanced firewall security, memory-safety fixes, stronger validation for network daemons, and security updates to core components. Key updates include enhancements to PF, OpenBSD’s packet filtering firewall, as well as fixes for vulnerabilities related to virtualization, cryptographic…
-
Cloudflare Adds New WAF Rules to Detect Attacks Targeting CVE-2026-111497
Cloudflare announced an emergency release of its Web Application Firewall (WAF) on October 25, 2026. This update introduces two detection rules for the Brotli vulnerability tracked as CVE-2026-111497. These rules specifically target requests that declare Brotli body encoding and traffic accessing the Next.js image optimization endpoint. By default, both rules are enabled in Log mode,…