#firewalls

Attackers are exploiting SSO access on FortiGate devices to export configurations, add admin accounts, and open persistent VPN access within seconds.

Source: Arctic Wolf

Over the course of this year I have explained to colleagues and clients who’s roles are not in Cybersecurity what certain phrases or abbreviations mean. After I while I started to drop them into a word document so I could reuse them. Then I decided to make this post so I can easily share the explanations. There are bound to be things missing, please drop a comment if I have missed something and…

A high-severity flaw lets unauthenticated attackers remotely knock Palo Alto firewalls offline by abusing GlobalProtect gateway and portal handling.

Source: The Hacker News | Palo Alto Networks PSIRT

SonicWall confirmed that a brute-force attack accessed backup firewall files in MySonicWall accounts, potentially exposing encrypted credentials and configuration data to attackers.

Source: BleepingComputer | SonicWall

Malware remains the primary vehicle for most data breaches, yet many organizations still treat employee security training as a checkbox exercise. To truly prepare employees for malware risks, leadership must pivot from static, annual compliance presentations to a dynamic, risk-aware culture. A single click on a malicious attachment can bypass sophisticated firewalls, making the human element the…

The Anatomy of a Delivery Scam The ubiquity of e-commerce has turned the package notification into a digital reflex. We expect alerts when parcels are in transit. Cybercriminals have weaponized this expectation, utilizing ‘smishing’—SMS phishing—to distribute malicious links that compromise user devices and personal information. When fake delivery messages create privacy and fraud risks, the…