Information Management Today

Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks

Security Affairs

SEPTEMBER 8, 2023

Cisco warns that a zero-day vulnerability (CVE-2023-20269) in Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) is actively exploited by ransomware groups to gain initial access to corporate networks. Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier).

Ransomware

Ransomware Authentication Access Education

FBI, CISA Echo Warnings on ‘Vishing’ Threat

Krebs on Security

AUGUST 21, 2020

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued a joint alert to warn about the growing threat from voice phishing or “ vishing ” attacks targeting companies. Restrict VPN access hours, where applicable, to mitigate access outside of allowed times.

Authentication

Authentication Access Phishing Mining

U.S. CISA: hackers breached a state government organization

Security Affairs

FEBRUARY 16, 2024

Cybersecurity and Infrastructure Security Agency (CISA) revealed that a threat actor gained access to an unnamed state government organization’s network environment via an administrator account belonging to a former employee. Neither of the two administrative accounts had multifactor authentication (MFA) enabled.

Government

Government Authentication Cybersecurity Data breaches

Webinars

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

MORE WEBINARS

CISA Order Highlights Persistent Risk at Network Edge

Krebs on Security

JUNE 15, 2023

government agency in charge of improving the nation’s cybersecurity posture is ordering all federal agencies to take new measures to restrict access to Internet-exposed networking equipment. The directive comes amid a surge in attacks targeting previously unknown vulnerabilities in widely used security and networking appliances.

Risk

Risk Ransomware Cybersecurity Access

9 Possible Ways Hackers Can Use Public Wi-Fi to Steal Your Sensitive Data

Security Affairs

FEBRUARY 12, 2024

Here, we’ll explore how cybercriminals exploit public Wi-Fi to access your private data and possibly steal your identity. Public Wi-Fi users are prime targets for MITM attacks because the information they send is often not encrypted, meaning it’s easy for hackers to access your data.

Encryption

Encryption Passwords Phishing Authentication

A zero-day in Atlas VPN Linux Client leaks users’ IP address

Security Affairs

SEPTEMBER 6, 2023

Experts warn of an Atlas VPN zero-day flaw impacting the Linux client that can reveal the user’s IP address by visiting a website. A Reddit user with the handle ‘Educational-Map-8145’ published a proof of concept exploit for a zero-day flaw in the Linux client of Atlas VPN. It does not have ANY authentication.

Education

Education Authentication Cybersecurity IT

GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services

Krebs on Security

NOVEMBER 21, 2020

And in May of this year, GoDaddy disclosed that 28,000 of its customers’ web hosting accounts were compromised following a security incident in Oct. In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage.” ” In the early morning hours of Nov.

Phishing

Phishing Authentication Passwords Access

News Alert: i2Coalition launches ‘VPN Trust Initiative’ to promote VPN operators’ best practices

The Last Watchdog

SEPTEMBER 26, 2023

26, 2023 — The Internet Infrastructure Coalition (i2Coalition) launched the VPN Trust Initiative (VTI) in 2020 to establish a baseline for how virtual private network (VPN) providers should operate. Advertising Practices: Given the complexity and different use cases for VPNs, claims must not mislead.

Privacy

Privacy Risk Encryption Authentication

Q&A: The lesser role VPNs now play for enterprises, SMBs — in a post-pandemic world

The Last Watchdog

JUNE 22, 2022

During the first two decades of this century, virtual private networks —VPNs—served as a cornerstone of network security. VPNs encrypt data streams and protect endpoints from unauthorized access, essentially by requiring all network communications to flow over a secured pipe. Related: Deploying human sensors.

Cloud

Cloud Encryption Access GDPR

CISA adds Chrome and Citrix NetScaler to its Known Exploited Vulnerabilities catalog

Security Affairs

JANUARY 18, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Chrome and Citrix flaws to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. reads the security advisory published by the IT giant.

IT

IT Authentication Cloud Access

NSA, CISA release guidance on hardening remote access via VPN solutions

Security Affairs

SEPTEMBER 29, 2021

CISA and the NSA agencies have published guidance for securely using virtual private network (VPN) solutions. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have released guidance for increasing the security of virtual private network (VPN) solutions.

Access

Access Authentication Government Cybersecurity

Threat actors breached Okta support system and stole customers’ data

Security Affairs

OCTOBER 21, 2023

Okta revealed that threat actors breached its support case management system and stole sensitive data that can be used in future attacks. HAR files can also contain sensitive data, including authentication information. The attackers gained access to files uploaded by certain Okta customers as part of some recent support cases.

Authentication

Authentication Archiving Data breaches Access

News alert: DigiCert extends cert management platform to support Microsoft CA, AWS Private CA

The Last Watchdog

AUGUST 8, 2023

8, 2023 – DigiCert today announced the expansion of its certificate management platform, DigiCert Trust Lifecycle Manager, to provide full lifecycle support for multiple CAs including Microsoft CA and AWS Private CA, as well as integration with ServiceNow to support existing IT service workflows. Lehi, Utah, Aug. DigiCert ® ?ONE

Authentication

Authentication Cloud Communications Government

Citrix warns admins to immediately patch NetScaler for actively exploited zero-days

Security Affairs

JANUARY 17, 2024

Citrix warns customers to install security updates to address two actively exploited zero-day vulnerabilities, tracked as CVE-2023-6548 and CVE-2023-6549, impacting Netscaler ADC and Gateway appliances. The vulnerability CVE-2023-6548 is an authenticated (low privileged) remote code execution affecting Management Interface.

Cloud

Cloud Authentication Access Security

VulnRecap 2/12/24: Ivanti, JetBrains, Fortinet, Linux Issues

eSecurity Planet

FEBRUARY 12, 2024

This week saw some repeat products from previous vulnerability recaps, such as Ivanti Policy Secure and JetBrains TeamCity servers. Make sure your security teams consistently check vendor bulletins for vulnerability announcements so your business can stay on top of all threats. Orca has now released further research information.

Authentication

Authentication Cybersecurity Security Access

CISA adds Cisco ASA and FTD and CrushFTP VFS flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

APRIL 25, 2024

Early in 2024, a customer contacted Cisco to report a suspicious related to its Cisco Adaptive Security Appliances (ASA). By redirecting the pointer to the Line Dancer interpreter, attackers can interact with the device through POST requests without authentication. PSIRT and Talos launched an investigation to support the customer.

IT

IT Authentication Access Security

NSA, CISA Release Guidance for Choosing and Hardening VPNs

eSecurity Planet

OCTOBER 1, 2021

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have released guidance and best practices for securing virtual private network (VPN) solutions. Choosing a VPN. The guide offers a number of issues to consider and pitfalls to avoid when choosing a VPN.

Authentication

Authentication Access Passwords Risk

Citrix ADC and Citrix Gateway are affected by a critical authentication bypass flaw

Security Affairs

NOVEMBER 8, 2022

Citrix released security updates to address a critical authentication bypass vulnerability in Citrix ADC and Citrix Gateway. Citrix is urging customers to install security updates to address a critical authentication bypass issue, tracked as CVE-2022-27510, in Citrix ADC and Citrix Gateway. Citrix ADC?and Citrix ADC?and

Authentication

Authentication Phishing Cloud Security

Vulnerability Recap 4/15/24 – Palo Alto, Microsoft, Ivanti Exploits

eSecurity Planet

APRIL 15, 2024

Threats range from severe weaknesses in Ivanti’s VPN appliances to zero-day exploits in popular software such as Palo Alto Networks’ PAN-OS and Telegram’s Windows client. Typically, these vulnerabilities result in remote code execution or denial-of-service attacks, posing major dangers to users’ data security.

Libraries

Libraries Risk Cybersecurity Honeypots

Zyxel warns customers of attacks on its enterprise firewall and VPN devices

Security Affairs

JUNE 24, 2021

Networking equipment giant Zyxel warns customers of a series of attacks that have been targeting some of its enterprise firewall and VPN devices. Networking equipment vendor Zyxel warned its customers of a series of attacks that have been targeting some of its enterprise firewall and VPN server solutions. Pierluigi Paganini.

IT

IT Authentication Cloud Access

Weekly Vulnerability Recap – September 4, 2023 – Attackers Hit Network Devices and More

eSecurity Planet

SEPTEMBER 5, 2023

Major cybersecurity events in the last week make clear that hackers just keep getting savvier — and security teams need to be vigilant to keep up. Remote code execution (RCE) vulnerabilities, such as those exploited by a pair of botnets, highlight the hazards of unpatched devices and the need for patch management.

Ransomware

Ransomware Authentication Cybersecurity Access

When Low-Tech Hacks Cause High-Impact Breaches

Krebs on Security

FEBRUARY 26, 2023

million customers, including website administrator passwords, sFTP credentials, and private SSL keys; -December 2022: Hackers gained access to and installed malware on GoDaddy’s cPanel hosting servers that “intermittently redirected random customer websites to malicious sites.” In a filing with the U.S.

Phishing

Phishing Passwords Authentication Security

VulnRecap 1/22/24 – Watch Chrome, Ivanti, Citrix Issues

eSecurity Planet

JANUARY 22, 2024

This week’s vulnerability news include GitHub credential access, a new Chrome fix, and hidden malware from pirated applications hosted on Chinese websites. Citrix and Ivanti are seeing more problems, too, as more vulnerabilities have cropped up in Netscaler and Endpoint Manager Mobile. and later releases of 13.1 NetScaler ADC 13.1-FIPS

Authentication

Authentication Access Encryption Cybersecurity

BEST PRACTICES – 9 must-do security protocols companies must embrace to stem remote work risks

The Last Watchdog

MARCH 6, 2021

The main problem for remote workers is the threat to online security. Start by checking to see what security protocols your company has in place. Here are some cybersecurity best practices tips that apply more than ever when it comes to remote workers carrying out their duties securely. Set-up 2-factor authentication.

Passwords

Passwords Risk Security Phishing

CISA, FBI, and NSA published the list of 12 most exploited vulnerabilities of 2022

Security Affairs

AUGUST 3, 2023

The knowledge of the 12 most exploited vulnerabilities of 2022 allows organizations to prioritize their patch management operations to minimize the attack surface. ” reads the advisory published by US agencies. The advisory also includes 30 additional routinely exploited vulnerabilities in 2022.

Authentication

Authentication Cybersecurity Access Risk

VulnRecap 3/11/24 – JetBrains & Atlassian Issues Persist

eSecurity Planet

MARCH 11, 2024

And all IT and security teams should follow vulnerability news for vendor bulletins and updates. March 4, 2024 JetBrains Server Issues Continue with New Vulnerabilities Type of vulnerability: Authentication bypass. The problem: On March 5, Apple released a security notice for its new operating systems, iOS 17.4 and iPadOS 17.4.

Authentication

Authentication Cloud Access Cybersecurity

Portnox Cloud: NAC Product Review

eSecurity Planet

APRIL 19, 2023

Portnox Cloud offers network access control (NAC) as a cloud-hosted SaaS solution that enables rapid deployment of basic NAC capabilities. To compare Portnox Cloud against competitors, see our complete list of top network access control (NAC) solutions. authentication to gather endpoint information for reporting and enforcement.

Cloud

Cloud Authentication IoT Access

Around 19,500 end-of-life Cisco routers are exposed to hack

Security Affairs

JANUARY 21, 2023

Researchers warn of about 19,500 end-of-life Cisco VPN routers on the Internet that are exposed to the recently disclosed RCE exploit chain. The IT giant announced that these devices will receive no security updates to address the bug because they have reached end of life (EoL). reads the advisory published by the company.

Authentication

Authentication Communications Access Risk

CISA orders federal agencies to disconnect Ivanti VPN instances by February 2

Security Affairs

FEBRUARY 1, 2024

CISA is ordering federal agencies to disconnect Ivanti Connect Secure and Ivanti Policy Secure products within 48 hours. For the first time since its establishment, CISA is ordering federal agencies to disconnect all instances of Ivanti Connect Secure and Ivanti Policy Secure products within 48 hours.

Authentication

Authentication Security Access Government

Vulnerability Recap 3/19/24 – Microsoft, Fortinet & More

eSecurity Planet

MARCH 19, 2024

March 8, 2024 150,000 Fortinet Secure Web Gateways Remain Exposed Type of vulnerability: Arbitrary code execution (ACE). The problem: The FortiOS SSL VPN feature vulnerability, CVE-2024-21762, disclosed February 8th , remains exposed to attack on nearly 150,000 devices according to the ShadowServer Foundation website.

Authentication

Authentication Cybersecurity Ransomware Security

Cisco confirms that data leaked by the Yanluowang ransomware gang were stolen from its systems

Security Affairs

SEPTEMBER 12, 2022

In August, Cisco disclosed a security breach, the Yanluowang ransomware gang breached its corporate network in late May and stole internal data. Upon achieving an MFA push acceptance, the attacker had access to the VPN in the context of the targeted user. The content of these files match what we already identified and disclosed.”

Ransomware

Ransomware IT Authentication File names

Unauthenticated Command Injection bug opens D-Link VPN routers to hack

Security Affairs

DECEMBER 8, 2020

An unauthenticated command injection vulnerability could be exploited by threat actors to compromise D-Link VPN routers. Security researchers at Digital Defense discovered three vulnerabilities in D-Link VPN routers, including command injection flaws, and an authenticated crontab injection flaw. and earlier. and earlier.

Authentication

Authentication Libraries Access Security

Sophos Firewall affected by a critical authentication bypass flaw

Security Affairs

MARCH 27, 2022

Sophos has fixed an authentication bypass vulnerability, tracked as CVE-2022-1040, that resides in the User Portal and Webadmin areas of Sophos Firewall. “An authentication bypass vulnerability allowing remote code execution was discovered in the User Portal and Webadmin of Sophos Firewall and responsibly disclosed to Sophos.

Authentication

Authentication Access Security IT

Attack infrastructure used in Cisco hack linked to Evil Corp affiliate

Security Affairs

SEPTEMBER 2, 2022

Researchers discovered that the infrastructure used in Cisco hack was the same used to target a Workforce Management Solution firm. Researchers from cybersecurity firm eSentire discovered that the attack infrastructure used in recent Cisco hack was also used to attack a top Workforce Management corporation in in April 2022.

Ransomware

Ransomware Access Authentication Passwords

SHARED INTEL: Coming very soon — ‘passwordless authentication’ as a de facto security practice

The Last Watchdog

NOVEMBER 11, 2020

As a tradeoff for enjoying our digital lives, we’ve learned to live with password overload and even tolerate two-factor authentication. I had a chance to discuss this seminal transition with George Avetisov, co-founder and chief executive officer of HYPR , a Manhattan-based supplier of advanced authentication technologies.

Authentication

Authentication Passwords Security Access

Experian, You Have Some Explaining to Do

Krebs on Security

JULY 10, 2022

In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Turner said he created the account at Experian in 2020 to place a security freeze on his credit file, and that he used a password manager to select and store a strong, unique password for his Experian account.

Passwords

Passwords Authentication Security Privacy

16 Remote Access Security Best Practices to Implement

eSecurity Planet

AUGUST 22, 2023

Remote access security is critical for protecting increasingly distributed work environments, ensuring that only authorized users can access your valuable information regardless of their location. We’ll cover a range of best practices for remote access security, from the simple and the practical to the more advanced.

Access

Access Security Passwords Blockchain

Hackers are targeting teleworkers with vishing campaign, CISA and FBI warn

Security Affairs

AUGUST 21, 2020

The Federal Bureau of Investigation ( FBI ) and the Cybersecurity and Infrastructure Security Agency ( CISA ) have issued a joint security advisory to warn teleworkers of an ongoing vishing campaign targeting organizations from multiple US industry industries.

Phishing

Phishing Authentication Access Mining

Best Practices to Make Sure VPN Access Remains Seamless

eSecurity Planet

DECEMBER 23, 2020

The COVID-19 pandemic of 2020 has forced enterprises of all sizes and industries to adopt new work approaches that keep employees safe at home while ensuring productivity and security. Many organizations have used VPNs for years to provide seamless connectivity without compromising security for employees who travel or work remotely.

Access

Access Authentication Encryption Security

Defending Against Misconfigured MFA & PrintNightmare Vulnerabilities

eSecurity Planet

MARCH 21, 2022

Using misconfigured multi-factor authentication (MFA) and an unpatched Windows vulnerability, Russian state-sponsored hackers were able to breach a non-governmental organization (NGO) and escalate privileges, the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI revealed last week. PrintNightmare Remains a Struggle.

Authentication

Authentication Passwords Access Systems administration

MY TAKE: ‘Digital trust’ has a huge role to play mitigating cybersecurity threats, going forward

The Last Watchdog

MAY 23, 2022

They require integrity, authentication, trusted identity and encryption. And yet at this moment, digital trust isn’t where it needs to be on the boardroom priority list or the IT security team’s strategy. This was the main topic of discussion recently at DigiCert Security Summit 2022. Failure is not an option. Trust under siege.

Cybersecurity

Cybersecurity Digital transformation Computer and Electronics Encryption

Almost 800,000 SonicWall VPN appliances online are vulnerable to CVE-2020-5135

Security Affairs

OCTOBER 16, 2020

The Tripwire VERT security team spotted almost 800,000 SonicWall VPN appliances exposed online that are vulnerable to the CVE-2020-5135 RCE flaw. Security experts from the Tripwire VERT security team have discovered 795,357 SonicWall VPN appliances that were exposed online that are vulnerable to the CVE-2020-5135 RCE flaw.

Search queries

Search queries Authentication Access Security

Attackers impersonate CircleCI platform to compromise GitHub accounts

Security Affairs

SEPTEMBER 25, 2022

Threat actors target GitHub users to steal credentials and two-factor authentication (2FA) codes by impersonating the CircleCI DevOps platform. GitHub is warning of an ongoing phishing campaign targeting its users to steal credentials and two-factor authentication (2FA) codes by impersonating the CircleCI DevOps platform.

Phishing

Phishing Authentication Passwords Access

Palo Alto Networks addresses tens of serious issues in PAN-OS

Security Affairs

MAY 15, 2020

Palo Alto Networks has issued security updates to address tens of vulnerabilities in PAN-OS, the software that runs on the company’s next-generation firewalls. One of the most severe vulnerabilities, tracked as CVE-2020-2018 , is an authentication bypass vulnerability in the Panorama context switching feature. Pierluigi Paganini.

Authentication

Authentication Access Communications Security

Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks

FBI, CISA Echo Warnings on ‘Vishing’ Threat

Webinars

Trending Sources

U.S. CISA: hackers breached a state government organization

Webinars

CISA Order Highlights Persistent Risk at Network Edge

9 Possible Ways Hackers Can Use Public Wi-Fi to Steal Your Sensitive Data

A zero-day in Atlas VPN Linux Client leaks users’ IP address

GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services

News Alert: i2Coalition launches ‘VPN Trust Initiative’ to promote VPN operators’ best practices

Q&A: The lesser role VPNs now play for enterprises, SMBs — in a post-pandemic world

CISA adds Chrome and Citrix NetScaler to its Known Exploited Vulnerabilities catalog

NSA, CISA release guidance on hardening remote access via VPN solutions

Threat actors breached Okta support system and stole customers’ data

News alert: DigiCert extends cert management platform to support Microsoft CA, AWS Private CA

Citrix warns admins to immediately patch NetScaler for actively exploited zero-days

VulnRecap 2/12/24: Ivanti, JetBrains, Fortinet, Linux Issues

CISA adds Cisco ASA and FTD and CrushFTP VFS flaws to its Known Exploited Vulnerabilities catalog

NSA, CISA Release Guidance for Choosing and Hardening VPNs

Citrix ADC and Citrix Gateway are affected by a critical authentication bypass flaw

Vulnerability Recap 4/15/24 – Palo Alto, Microsoft, Ivanti Exploits

Zyxel warns customers of attacks on its enterprise firewall and VPN devices

Weekly Vulnerability Recap – September 4, 2023 – Attackers Hit Network Devices and More

When Low-Tech Hacks Cause High-Impact Breaches

VulnRecap 1/22/24 – Watch Chrome, Ivanti, Citrix Issues

BEST PRACTICES – 9 must-do security protocols companies must embrace to stem remote work risks

CISA, FBI, and NSA published the list of 12 most exploited vulnerabilities of 2022

VulnRecap 3/11/24 – JetBrains & Atlassian Issues Persist

Portnox Cloud: NAC Product Review

Around 19,500 end-of-life Cisco routers are exposed to hack

CISA orders federal agencies to disconnect Ivanti VPN instances by February 2

Vulnerability Recap 3/19/24 – Microsoft, Fortinet & More

Cisco confirms that data leaked by the Yanluowang ransomware gang were stolen from its systems

Unauthenticated Command Injection bug opens D-Link VPN routers to hack

Sophos Firewall affected by a critical authentication bypass flaw

Attack infrastructure used in Cisco hack linked to Evil Corp affiliate

SHARED INTEL: Coming very soon — ‘passwordless authentication’ as a de facto security practice

Experian, You Have Some Explaining to Do

16 Remote Access Security Best Practices to Implement

Hackers are targeting teleworkers with vishing campaign, CISA and FBI warn

Best Practices to Make Sure VPN Access Remains Seamless

Defending Against Misconfigured MFA & PrintNightmare Vulnerabilities

MY TAKE: ‘Digital trust’ has a huge role to play mitigating cybersecurity threats, going forward

Almost 800,000 SonicWall VPN appliances online are vulnerable to CVE-2020-5135

Attackers impersonate CircleCI platform to compromise GitHub accounts

Palo Alto Networks addresses tens of serious issues in PAN-OS

Stay Connected