Tag: firewall
-
US names Chinese national it alleges was behind 2020 attack on Sophos firewalls
Also sanctions his employer an outfit called Sichuan Silence linked to Ragnarok ransomware First seen on theregister.com Jump to article: www.theregister.com/2024/12/11/sichuan_silence_sophos_zeroday_sanctions/
-
US sanctions Chinese cybersecurity firm over global malware campaign
Tags: attack, breach, china, computer, control, corporate, credentials, cve, cyber, cyberattack, cybersecurity, email, encryption, exploit, finance, firewall, fraud, government, group, healthcare, identity, infection, infrastructure, intelligence, international, malicious, malware, monitoring, network, office, password, ransomware, risk, service, software, sophos, technology, terrorism, threat, tool, vulnerability, zero-dayThe US government has imposed sanctions on Chinese cybersecurity firm Sichuan Silence Information Technology and one of its employees, Guan Tianfeng, for their alleged involvement in a 2020 global cyberattack that exploited zero day vulnerabilities in firewalls.The actions were announced by the US Department of the Treasury and the Department of Justice (DOJ), which also…
-
Attackers exploit zero-day RCE flaw in Cleo managed file transfer
Tags: advisory, attack, cve, edr, exploit, firewall, flaw, group, Internet, malicious, mitigation, moveIT, powershell, ransomware, rce, remote-code-execution, software, tool, update, vulnerability, vulnerability-management, windows, zero-daySecurity researchers have warned about in-the-wild attacks that exploit a remote code execution vulnerability in managed file transfer (MFT) solutions developed by enterprise software vendor Cleo Communications.The impacted products include the latest versions of Cleo LexiCom, Cleo VLTrader and Cleo Harmony, with experts advising to temporarily disconnect these systems from the internet until a patch…
-
US sanctions Chinese cybersecurity company for firewall compromise, ransomware attacks
The Department of the Treasury is sanctioning Chinese cybersecurity company Sichuan Silence, and one of its employees, Guan Tianfeng, for their roles in the April 2020 … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/10/us-sanctions-sichuan-silence-guan-tianfeng/
-
US Indicts, Sanctions Alleged Chinese Sophos Firewall Hacker
Tianfeng Guan Allegedly Developed Zero-Day Exploit of Sophos XG Firewall. The U.S. federal government rolled out its heavy guns Tuesday against a Chinese hacker allegedly at the center of a zero-day exploit used to hack firewalls made by Sophos, unsealing an indictment, rolling out sanctions and offering $10 million for information leading to the suspect’s…
-
US sanctions Chinese cybersecurity firm for firewall hacks targeting critical infrastructure
Tags: china, cybersecurity, exploit, firewall, hacking, infrastructure, sophos, vulnerability, zero-dayThe U.S. sanctioned a Chinese cybersecurity company and one of its employees for exploiting a zero-day vulnerability in Sophos firewalls to target U.S. organizations. On Tuesday, the U.S. Treasury Department said Guan Tianfeng, an employee of Sichuan Silence, used the vulnerability to compromise approximately 81,000 firewalls in April 2020. The hacking campaign, detailed by Sophos…
-
US sanctions Chinese cyber firm for compromising ‘thousands’ of firewalls in 2020
Sichuan Silence Information Technology Company and one of its employees, Guan Tianfeng, were the targets of the sanctions, and the Justice Department indicted Guan for his role in the attacks. The State Department also issued a $10 million reward for additional information on the company or Guan.]]> First seen on therecord.media Jump to article: therecord.media/us-sanctions-chinese-cyber-firm-compromising-firewalls
-
Treasury sanctions Chinese cyber company, employee for 2020 global firewall attack
The department’s Office of Foreign Assets Control said Guan Tianfeng used a zero-day exploit to deploy malware on 81,000 firewalls. First seen on cyberscoop.com Jump to article: cyberscoop.com/treasury-sanctions-chinese-cyber-company-2020-firewall-attack/
-
US sanctions Chinese firm for hacking firewalls in ransomware attacks
The U.S. Treasury Department has sanctioned Chinese cybersecurity company Sichuan Silence and one of its employees for their involvement in a series of Ragnarok ransomware attacks targeting U.S. critical infrastructure companies and many other victims worldwide in April 2020. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-sanctions-chinese-firm-for-hacking-firewalls-in-ragnarok-ransomware-attacks/
-
Transfer-Software von Cleo: Hinter Firewall bringen, Patch wirkungslos
Die Datenstransfer-Software von Cleo hatte eine Sicherheitslücke gestopft jedoch unzureichend. Das Leck wird aktiv angegriffen. First seen on heise.de Jump to article: www.heise.de/news/Transfer-Software-von-Cleo-Hinter-Firewall-bringen-Patch-wirkungslos-10193961.html
-
EDR-Software ein Kaufratgeber
Tags: ai, android, api, backup, browser, chrome, cloud, computing, crowdstrike, cyberattack, detection, edr, endpoint, firewall, identity, incident response, intelligence, iot, kubernetes, linux, macOS, mail, malware, microsoft, network, ransomware, risk, siem, soar, software, sophos, threat, tool, windows, zero-day -
Zero-day exploits underscore rising risks for internet-facing interfaces
Recent reports confirm the active exploitation of a critical zero-day vulnerability targeting Palo Alto Networks’ Next-Generation Firewalls (NGFW) management interfaces. While Palo Alto’s swift advisories and mitigation guidance offer a starting point for remediation, the broader implications of such vulnerabilities… First seen on securityintelligence.com Jump to article: securityintelligence.com/news/zero-day-exploits-underscore-rising-risks-for-internet-facing-interfaces/
-
Here’s Where Top Cybersecurity Vendors Stand as 2025 Nears
Palo Alto, CrowdStrike, Zscaler Eye Firewall, SIEM Replacement, Incident Recovery Three of the world’s largest pure-play cybersecurity vendors recently reported earnings, grappling with SIEM and firewall displacement opportunities along with rebounding from a massive outage. Palo Alto Networks Continues to reap the benefits of buying IBM’s QRadar SaaS business. First seen on govinfosecurity.com Jump to…
-
Introducing Private Locations: Securely Scan Your Internal Applications
Secure your internal applications with Escape’s Private Locations. Scan behind firewalls or VPNs using Repeater”, no exposure, no compromises. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/introducing-private-locations-securely-scan-your-internal-applications/
-
Navigating Firewall Security Policy Challenges in Technology Organizations: How FireMon Simplifies Complexity
In the technology sector, innovation and agility are key drivers of success. Organizations in this field lead the charge in adopting cutting-edge architectures like hybrid clouds, microservices, and DevSecOps practices…. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/navigating-firewall-security-policy-challenges-in-technology-organizations-how-firemon-simplifies-complexity/
-
Why Zero-Day Attacks Bypass Traditional Firewall Security: Defending Against Zero-Day’s like Palo Alto Networks CVE-2024-0012
Recently, Palo Alto Networks identified and patched a critical zero-day vulnerability in their next-generation firewalls (NGFWs). This vulnerability, tracked as CVE-2024-0012, allowed attackers to execute code on vulnerable devices remotely. This vulnerability has been actively exploited in attacks dubbed “Operation Lunar Peek.” First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/why-zero-day-attacks-bypass-traditional-firewall-security-defending-against-zero-days-like-palo-alto-networks-cve-2024-0012/
-
CISA Warns of Zyxel Firewalls, CyberPanel, North Grid, ProjectSend Flaws Exploited in Wild
Tags: cisa, cve, cyber, cybersecurity, exploit, firewall, flaw, Hardware, infrastructure, mitigation, software, vulnerability, zyxelThe Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings about several vulnerabilities being actively exploited in the wild. The vulnerabilities affect popular software and hardware products, including Zyxel firewalls, CyberPanel, North Grid, and ProjectSend. Organizations using these products are urged to apply mitigations immediately or discontinue usage if fixes are unavailable. CVE-2024-51378: CyberPanel Incorrect…
-
CISA, German cyber authorities warn Zyxel firewalls facing active exploitation
Attackers have targeted dozens of companies with Helldown ransomware, researchers found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-german-zyxel-firewalls-exploitation/734581/
-
Misconfigured WAFs Heighten DoS, Breach Risks
Organizations that rely on their content delivery network provider for Web application firewall services may be inadvertently leaving themselves open to attack. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/misconfigured-wafs-heighten-dos-breach-risks
-
CISA Warns of Zyxel Firewall Vulnerability Exploited in Attacks
A second vulnerability in Zyxel firewalls has been exploited in Helldown ransomware attacks over the past weeks. The post CISA Warns of Zyxel Firewall Vulnerability Exploited in Attacks appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-zyxel-firewall-vulnerability-exploited-in-attacks/
-
U.S. CISA adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Proself versions before Ver5.62, Ver1.65, and Ver1.08 are vulnerable to XXE attacks, allowing unauthenticated attackers…
-
Talent overlooked: embracing neurodiversity in cybersecurity
In cybersecurity, diverse perspectives help in addressing complex, emerging threats. Increasingly, there’s a push to recognize that neurodiversity brings significant value to cybersecurity. However, neurodiverse people frequently face systemic barriers that hinder their success in the field.Neurodiversity refers to the way some people’s brains work differently to the neurotypical brain. This includes autism, ADHD (attention…
-
SafeLine: Open-source web application firewall (WAF)
SafeLine is an open-source and self-hosted Web Application Firewall (WAF) that protects websites from cyber attacks. >>SafeLine WAF was created to protect web … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/04/safeline-open-source-web-application-firewall-waf/
-
CyberRatings report exposes critical flaws in cloud-native firewalls
First seen on scworld.com Jump to article: www.scworld.com/brief/cyberratings-report-exposes-critical-flaws-in-cloud-native-firewalls