#firewalls

Attackers are exploiting SSO access on FortiGate devices to export configurations, add admin accounts, and open persistent VPN access within seconds.

Source: Arctic Wolf

Over the course of this year I have explained to colleagues and clients who’s roles are not in Cybersecurity what certain phrases or abbreviations mean. After I while I started to drop them into a word document so I could reuse them. Then I decided to make this post so I can easily share the explanations. There are bound to be things missing, please drop a comment if I have missed something and…

A high-severity flaw lets unauthenticated attackers remotely knock Palo Alto firewalls offline by abusing GlobalProtect gateway and portal handling.

Source: The Hacker News | Palo Alto Networks PSIRT

SonicWall confirmed that a brute-force attack accessed backup firewall files in MySonicWall accounts, potentially exposing encrypted credentials and configuration data to attackers.

Source: BleepingComputer | SonicWall

When business leaders draft incident response plans, the focus almost exclusively rests on external actors. Teams simulate ransomware attacks, phishing campaigns, and server exploits. However, the most damaging data exposures often originate from within. If you do not ensure that unauthorised employee access be part of your organization’s formal breach response plan, you leave a critical blind…

The Anatomy of the Clover Health Incident Clover Health, a major provider of Medicare Advantage plans, recently confirmed that its systems were compromised after attackers gained unauthorized entry to three employee accounts. The intrusion, which began on July 4th, serves as a stark reminder that even organizations with advanced AI-driven tools remain vulnerable to the oldest trick in the digital…

When your business shares data with a vendor, you do not just share information; you share the risk associated with that data. Third-party providers are often the weakest link in a corporate security posture, serving as high-value targets for attackers looking to bypass perimeter defenses. Implementing a simple checklist for protecting vendor data is no longer optional; it is a foundational…