#firewalls

Attackers are exploiting SSO access on FortiGate devices to export configurations, add admin accounts, and open persistent VPN access within seconds.

Source: Arctic Wolf

Over the course of this year I have explained to colleagues and clients who’s roles are not in Cybersecurity what certain phrases or abbreviations mean. After I while I started to drop them into a word document so I could reuse them. Then I decided to make this post so I can easily share the explanations. There are bound to be things missing, please drop a comment if I have missed something and…

A high-severity flaw lets unauthenticated attackers remotely knock Palo Alto firewalls offline by abusing GlobalProtect gateway and portal handling.

Source: The Hacker News | Palo Alto Networks PSIRT

SonicWall confirmed that a brute-force attack accessed backup firewall files in MySonicWall accounts, potentially exposing encrypted credentials and configuration data to attackers.

Source: BleepingComputer | SonicWall

Understanding the Internal Threat Landscape Unauthorised employee access represents one of the most significant yet under-addressed vulnerabilities in modern corporate security. While organizations frequently invest heavily in firewalls and external defense mechanisms, the risk posed by insiders—whether accidental, negligent, or malicious—often remains a blind spot. To effectively prepare…

When business leaders draft incident response plans, the focus almost exclusively rests on external actors. Teams simulate ransomware attacks, phishing campaigns, and server exploits. However, the most damaging data exposures often originate from within. If you do not ensure that unauthorised employee access be part of your organization’s formal breach response plan, you leave a critical blind…

The Anatomy of the Clover Health Incident Clover Health, a major provider of Medicare Advantage plans, recently confirmed that its systems were compromised after attackers gained unauthorized entry to three employee accounts. The intrusion, which began on July 4th, serves as a stark reminder that even organizations with advanced AI-driven tools remain vulnerable to the oldest trick in the digital…