#firewalls

Attackers are exploiting SSO access on FortiGate devices to export configurations, add admin accounts, and open persistent VPN access within seconds.

Source: Arctic Wolf

Over the course of this year I have explained to colleagues and clients who’s roles are not in Cybersecurity what certain phrases or abbreviations mean. After I while I started to drop them into a word document so I could reuse them. Then I decided to make this post so I can easily share the explanations. There are bound to be things missing, please drop a comment if I have missed something and…

A high-severity flaw lets unauthenticated attackers remotely knock Palo Alto firewalls offline by abusing GlobalProtect gateway and portal handling.

Source: The Hacker News | Palo Alto Networks PSIRT

SonicWall confirmed that a brute-force attack accessed backup firewall files in MySonicWall accounts, potentially exposing encrypted credentials and configuration data to attackers.

Source: BleepingComputer | SonicWall

Telecommunications operators sit at the center of the global digital infrastructure. By processing call metadata, location data, and personal identification information for millions, these firms represent high-value targets for both cyber threats and regulatory scrutiny. A significant portion of this data is managed through external partners, making it vital that telecoms teams know about…

The Anatomy of Customer Impersonation Customer impersonation scams represent a sophisticated evolution in social engineering. Unlike standard phishing, where attackers cast a wide net, these scams involve a targeted effort to hijack the identity of a legitimate client. When a fraudster successfully masquerades as a verified customer, they gain access to sensitive accounts, proprietary data, and,…

Navigating the PDPA Landscape Data is the lifeblood of modern commerce in Singapore, but it is also a liability. For local enterprises, the Personal Data Protection Act (PDPA) is not merely a set of administrative hurdles; it is the foundational legal framework that governs every interaction between a business and its customers. Every time a firm asks for an email address, tracks a cookie, or…