Latest Firewall news

Sophos fixes SQL injection vulnerability in their Cyberoam OS

Sophos has deployed a hotfix for their line of Cyberoam firewalls and routers to fix a SQL injection vulnerability.
- Lawrence Abrams
- December 10, 2020
- 04:17 PM
- 0
Passwords exposed for almost 50,000 vulnerable Fortinet VPNs

A hacker has now leaked the credentials of almost 50,000 Fortinet SSL VPNs vulnerable to CVE-2018-13379. Exploits for these VPNs had been posted over the weekend on hacker forums, as reported by BleepingComputer.
- Ax Sharma
- November 25, 2020
- 08:16 AM
- 0
Hacker posts exploits for over 49,000 vulnerable Fortinet VPNs

Thousands of domains, including those belonging to high street banks and government organizations are vulnerable to a critical Path Traversal flaw in Fortinet SSL VPN.
- Ax Sharma
- November 22, 2020
- 11:40 AM
- 0
Palo Alto Networks fixes critical flaw in PAN-OS firewall software

Palo Alto Networks has fixed a new critical vulnerability affecting multiple versions of PAN-OS, the operating system affecting its next-generation firewalls.
- Ionut Ilascu
- September 11, 2020
- 11:11 AM
- 0
Cisco patches ASA/FTD firewall flaw actively exploited by hackers

Cisco fixed a high severity and actively exploited read-only path traversal vulnerability affecting the web services interface of two of its firewall products.
- Sergiu Gatlan
- July 24, 2020
- 11:16 AM
- 0
Cisco fixes critical pre-auth flaws allowing router takeover

Cisco today has released security updates to address critical remote code execution (RCE), authentication bypass, and static default credential vulnerabilities affecting multiple router and firewall devices that could lead to full device takeover.
- Sergiu Gatlan
- July 15, 2020
- 01:26 PM
- 0
Palo Alto Networks patches critical vulnerability in firewall OS

Palo Alto Networks disclosed a critical vulnerability found in the operating system (PAN-OS) of all its next-generation firewalls that could allow unauthenticated network-based attackers to bypass authentication.
- Sergiu Gatlan
- June 29, 2020
- 12:16 PM
- 1
Hackers tried to use Sophos Firewall zero-day to deploy Ransomware

Hackers tried to exploit a zero-day in the Sophos XG firewall to distribute ransomware to Windows machines but were blocked by a hotfix issued by Sophos.
- Lawrence Abrams
- May 21, 2020
- 02:32 PM
- 0
Asnarök malware exploits firewall zero-day to steal credentials

Some Sophos firewall products were attacked with a new Trojan malware, dubbed Asnarök by researchers cyber-security firm Sophos, to steal usernames and hashed passwords starting with April 22 according to an official timeline.
- Sergiu Gatlan
- April 27, 2020
- 11:07 AM
- 0
Hackers exploit zero-day in Sophos XG Firewall, fix released

Sophos has fixed a zero-day SQL injection vulnerability in their XG Firewall after receiving reports that hackers actively exploited it in attacks.
- Lawrence Abrams
- April 26, 2020
- 03:43 PM
- 1
Cisco Patches Critical CDP Flaws Affecting Millions of Devices

Five critical vulnerabilities found in various implementations of the Cisco Discovery Protocol (CDP) could allow attackers on the local network to take over tens of millions of enterprise devices as discovered by IoT security company Armis.
- Sergiu Gatlan
- February 05, 2020
- 02:36 PM
- 0
Symantec Fixes Privilege Escalation Flaw in Endpoint Protection

Symantec fixed a local privilege escalation security flaw affecting all Symantec Endpoint Protection software versions prior to 14.2 RU2, and allowing attackers to escalate privileges on compromised devices and execute malicious code using SYSTEM privileges.
- Sergiu Gatlan
- November 14, 2019
- 09:16 AM
- 0
Cloudflare Deploys Firewall Rule to Block New Drupal Exploits

Exploitation attempts of a highly critical vulnerability discovered in the Drupal content management software (CMS) on February 20 were blocked by Cloudflare using Web Application Firewall (WAF) rules designed to protect its customers' websites from being compromised.
- Sergiu Gatlan
- March 05, 2019
- 07:15 PM
- 0
OpenSnitch Is a Host-Based Firewall for Linux Desktops

Simone Margaritelli, the VP of Research at Zimperium, has created a Linux port of Little Snitch, a popular macOS firewall application. Named OpenSnitch, the Linux port works on the same principles of the Mac version, being a host-based firewall that notifies users when apps attempt to initiate new outgoing network connections.
- Catalin Cimpanu
- April 10, 2018
- 07:22 PM
- 1
Cisco Fixes Remote Code Execution Bug Rated 10 Out of 10 on Severity Scale

Cisco has released software patches that fix a major vulnerability affecting Cisco devices running Adaptive Security Appliance (ASA) Software.
- Catalin Cimpanu
- January 30, 2018
- 12:15 AM
- 1
GlassWire 2.0 Released With VirusTotal Scanning, Evil Twin Detection, and More

GlassWire 2.0 has been released that comes with some new features such as VirusTotal scanning, Windows Firewall rules synchronization, WiFi evil twin discovery, multi-monitor support, and hi-res monitor support.
- Lawrence Abrams
- December 14, 2017
- 10:42 PM
- 0
Fortinet VPN Client Exposes VPN Creds, Palo Alto Firewalls Allow Remote Attacks

It's been a bad week for two of the world's biggest vendors of enterprise hardware and software — Fortinet and Palo Alto Networks. Both companies fixed security issues this week affecting some of their most popular products, with some bugs being quite intrusive and dangerous.
- Catalin Cimpanu
- December 14, 2017
- 08:50 AM
- 0
Malware Uses Obscure Intel CPU Feature to Steal Data and Avoid Firewalls

Microsoft's security team has come across a malware family that uses Intel's Active Management Technology (AMT) Serial-over-LAN (SOL) interface as a file transfer tool.
- Catalin Cimpanu
- June 08, 2017
- 05:20 AM
- 3
Java and Python Contain Security Flaws That Allow Attackers to Bypass Firewalls

Both Java and Python contain similar security flaws that allow an attacker to bypass firewalls by injecting malicious commands inside FTP URLs.
- Catalin Cimpanu
- February 21, 2017
- 06:33 AM
- 0
Cerber Ransomware Doesn't Encrypt Files Belonging to Security Products

A variant of the Cerber ransomware spotted in the wild in the past month contains a function that searches for locally-installed security products and avoids encrypting their files, so firewalls, antivirus or antispyware products can continue working even after Cerber has locked the computer.
- Catalin Cimpanu
- February 15, 2017
- 04:08 AM
- 1