Latest Firewall news

ArcaneDoor hackers exploit Cisco zero-days to breach govt networks

Cisco warned today that a state-backed hacking group has been exploiting two zero-day vulnerabilities in Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) firewalls since November 2023 to breach government networks worldwide.
- Sergiu Gatlan
- April 24, 2024
- 01:07 PM
- 0
Exploit released for Palo Alto PAN-OS bug used in attacks, patch now

Exploit code is now available for a maximum severity and actively exploited vulnerability in Palo Alto Networks' PAN-OS firewall software.
- Sergiu Gatlan
- April 16, 2024
- 02:36 PM
- 0
Palo Alto Networks zero-day exploited since March to backdoor firewalls

Suspected state-sponsored hackers have been exploiting a zero-day vulnerability in Palo Alto Networks firewalls tracked as CVE-2024-3400 since March 26, using the compromised devices to breach internal networks, steal data and credentials.
- Lawrence Abrams
- April 13, 2024
- 08:35 AM
- 0
Protect your devices anywhere with $50 off the Deeper Connect Pico

Keeping our data and devices safe from threats across networks shouldn't require a subscription. This hardware firewall and VPN gives you peace of mind without a monthly charge for $148.99, $50 off the $199 MSRP.
- BleepingComputer Deals
- January 23, 2024
- 07:08 AM
- 0
Over 178K SonicWall firewalls vulnerable to DoS, potential RCE attacks

Security researchers have found over 178,000 SonicWall next-generation firewalls (NGFW) with the management interface exposed online are vulnerable to denial-of-service (DoS) and potential remote code execution (RCE) attacks.
- Sergiu Gatlan
- January 15, 2024
- 01:28 PM
- 0
Juniper warns of critical RCE bug in its firewalls and switches

Juniper Networks has released security updates to fix a critical pre-auth remote code execution (RCE) vulnerability in its SRX Series firewalls and EX Series switches.
- Sergiu Gatlan
- January 12, 2024
- 12:36 PM
- 0
Sophos backports RCE fix after attacks on unsupported firewalls

Sophos opted to backport a security update for CVE-2022-3236 for end-of-life (EOL) firewall firmware versions after discovering hackers actively exploiting the flaw in attacks.
- Bill Toulas
- December 12, 2023
- 12:29 PM
- 0
Over 1,450 pfSense servers exposed to RCE attacks via bug chain

Roughly 1,450 pfSense instances exposed online are vulnerable to command injection and cross-site scripting flaws that, if chained, could enable attackers to perform remote code execution on the appliance.
- Bill Toulas
- December 12, 2023
- 09:00 AM
- 2
Microsoft drops SMB1 firewall rules in new Windows 11 build

Windows 11 will no longer add SMB1 Windows Defender Firewall rules when creating new SMB shares starting with today's Canary Channel Insider Preview Build 25992 build.
- Sergiu Gatlan
- November 08, 2023
- 02:56 PM
- 0
Cloudflare DDoS protections ironically bypassed using Cloudflare

Cloudflare's Firewall and DDoS prevention can be bypassed through a specific attack process that leverages logic flaws in cross-tenant security controls.
- Bill Toulas
- September 30, 2023
- 10:16 AM
- 5
Thousands of Juniper devices vulnerable to unauthenticated RCE flaw

An estimated 12,000 Juniper SRX firewalls and EX switches are vulnerable to a fileless remote code execution flaw that attackers can exploit without authentication.
- Bill Toulas
- September 18, 2023
- 03:40 PM
- 0
Sponsored Content
Why Network Visibility Doesn’t Have to be so Complicated

Smart devices offer numerous benefits to both homes and small businesses, but they also pose unique security risks that can fly under the radar. Learn from Firewalla on how consumers and small business owners can effectively secure their smart homes and workplaces with the help of increased visibility.
- Sponsored by Firewalla
- September 12, 2023
- 09:30 AM
- 0
Exploit released for Juniper firewall bugs allowing RCE attacks

Proof-of-concept exploit code has been publicly released for vulnerabilities in Juniper SRX firewalls that, when chained, can allow unauthenticated attackers to gain remote code execution in Juniper's JunOS on unpatched devices.
- Sergiu Gatlan
- August 28, 2023
- 10:46 AM
- 0
Get lifetime cybersecurity with this portable firewall for $198.99

The Deeper Connect Mini Decentralized VPN hardware brings you portable security, with no monthly fees: $198.99, more than 40% off the previous MSRP.
- BleepingComputer Deals
- July 25, 2023
- 07:17 AM
- 0
Always be protected with this portable hardware-based firewall deal

No matter where you are, you can always use a layer of extra security. This hardware firewall gives you peace of mind for $139.99, but you'll need to buy fast, as this deal stops at the end of July 14th.
- BleepingComputer Deals
- June 30, 2023
- 07:14 AM
- 0
Fortinet fixes critical RCE flaw in Fortigate SSL-VPN devices, patch now

Fortinet has released new Fortigate firmware updates that fix an undisclosed, critical pre-authentication remote code execution vulnerability in SSL VPN devices, tracked as CVE-2023-27997.
- Lawrence Abrams
- June 11, 2023
- 11:43 AM
- 0
Zyxel shares tips on protecting firewalls from ongoing attacks

Zyxel has published a security advisory containing guidance on protecting firewall and VPN devices from ongoing attacks and detecting signs of exploitation.
- Bill Toulas
- June 03, 2023
- 10:06 AM
- 0
Hackers exploit critical Zyxel firewall flaw in ongoing attacks

Hackers are performing widespread exploitation of a critical-severity command injection flaw in Zyxel networking devices, tracked as CVE-2023-28771, to install malware.
- Bill Toulas
- May 31, 2023
- 01:54 PM
- 0
Zyxel warns of critical vulnerabilities in firewall and VPN devices

Zyxel is warning customers of two critical-severity vulnerabilities in several of its firewall and VPN products that attackers could leverage without authentication.
- Bill Toulas
- May 25, 2023
- 09:31 AM
- 0
Get multi-layer protection with this $199.99 DPN hardware deal

You can now get the ad-blocking decentralized VPN device, Deeper Connect Mini, for $199.99, more than $100 off the previous MSRP.
- BleepingComputer Deals
- May 24, 2023
- 07:07 AM
- 0