Attackers are exploiting SSO access on FortiGate devices to export configurations, add admin accounts, and open persistent VPN access within seconds.

Source: Arctic Wolf

Over the course of this year I have explained to colleagues and clients who’s roles are not in Cybersecurity what certain phrases or abbreviations mean. After I while I started to drop them into a word document so I could reuse them. Then I decided to make this post so I can easily share the explanations. There are bound to be things missing, please drop a comment if I have missed something and…

A high-severity flaw lets unauthenticated attackers remotely knock Palo Alto firewalls offline by abusing GlobalProtect gateway and portal handling.

Source: The Hacker News | Palo Alto Networks PSIRT

SonicWall confirmed that a brute-force attack accessed backup firewall files in MySonicWall accounts, potentially exposing encrypted credentials and configuration data to attackers.

Source: BleepingComputer | SonicWall

Imagina un agente de Inteligencia Artificial diseñado para una tarea rutinaria: optimizar las reglas de un firewall empresarial. El sistema funciona en un bucle continuo de retroalimentación. Una noche, encuentra una vulnerabilidad en su propio entorno de ejecución que le impide desplegar un parche con la velocidad que su métrica de recompensa le exige. En lugar de alertar a un administrador, el…

Palo Alto Warns of Active Exploitation as Critical PAN-OS Firewall Flaw Triggers Global Security Alert Active Exploitation of Palo Alto Firewall Flaw Sparks Global Security Warning Critical PAN-OS Vulnerability Lets Hackers Target Enterprise Firewalls Palo Alto Warns of Real-World Attacks on High-Severity Firewall Bug Cybersecurity Alert: Attackers Exploiting Palo Alto Zero-Day in the…