#firewalls

Attackers are exploiting SSO access on FortiGate devices to export configurations, add admin accounts, and open persistent VPN access within seconds.

Source: Arctic Wolf

Over the course of this year I have explained to colleagues and clients who’s roles are not in Cybersecurity what certain phrases or abbreviations mean. After I while I started to drop them into a word document so I could reuse them. Then I decided to make this post so I can easily share the explanations. There are bound to be things missing, please drop a comment if I have missed something and…

A high-severity flaw lets unauthenticated attackers remotely knock Palo Alto firewalls offline by abusing GlobalProtect gateway and portal handling.

Source: The Hacker News | Palo Alto Networks PSIRT

SonicWall confirmed that a brute-force attack accessed backup firewall files in MySonicWall accounts, potentially exposing encrypted credentials and configuration data to attackers.

Source: BleepingComputer | SonicWall

Credential stuffing is not merely a technical annoyance; it is a systematic assault on user privacy. By leveraging automated bots to test stolen username and password pairs across multiple platforms, attackers gain unauthorized access to accounts, leading to data exfiltration, identity theft, and severe regulatory repercussions. For organizations, the primary challenge is to reduce the privacy…

A data breach in healthcare isn’t just a technical incident; it’s a profound breach of trust, a regulatory minefield, and a direct threat to patient well-being. The highly sensitive nature of protected health information (PHI) makes healthcare organisations prime targets for cyber attackers, leading to devastating consequences from hefty fines to irreparable reputational damage. When an incident…

Universities, with their vast repositories of student PII, sensitive research data, financial records, and diverse user base, present an attractive target for cybercriminals. The blend of open academic environments and critical administrative functions creates unique vulnerabilities. When a data breach occurs, the repercussions are far-reaching, impacting reputation, finances, and the fundamental…