Search

Search Result:

SonicWall firewall maker hacked using zero-day in its VPN device

Security hardware manufacturer SonicWall has issued an urgent security notice about threat actors exploiting a zero-day vulnerability in their VPN products to perform attacks on their internal
25 Jan 2021 704 Views
SonicWall firewall maker hacked using zero-day in its VPN device

HKPC Urges Enterprises for Cyber Security Strategy for the New Normal and New Technologies

. Enterprises can also strengthen their cyber security by referencing the specifically compiled cyber security guidelines on work from home, web meeting, remote access and enterprise VPN, etc. which can
19 Jan 2021 1380 Views
HKPC Urges Enterprises for Cyber Security Strategy for the New Normal and New Technologies

HKCERT Security Newsletter (January 2021 Issue)

FortiOS SSL VPN Vulnerability (CVE-2018-13379) Immediately [FB Post] Patch FortiOS SSL VPN Vulnerability (CVE-2018-13379) Immediately [LinkedIn post] Patch FortiOS SSL VPN Vulnerability (CVE-2018-13379
6 Jan 2021 179 Views
HKCERT Security Newsletter (January 2021 Issue)

Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products

Zyxel has released a patch to address a critical vulnerability in its firmware concerning a hardcoded, undocumented secret account that could be abused by an attacker to login with administrative privileges and compromise its networking devices. The flaw, tracked as CVE-2020-29583 (CVSS score 7.8), affects version 4.60 present in a wide-range of Zyxel devices, including Unified Security Gateway
5 Jan 2021 82690 Views
Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products

Happy New Year: Jan 1, 2021 security cert expiration causes havoc for some Check Point VPN users

Outdated clients stop working, organizations with thousands of end-points told to switch out .sys files It wasn't the best of New Year's Day mornings for some Check Point customers; in addition to possible hangovers, those who lagged with their patching had been left with inoperable systems and a tough fix ahead for some.…
5 Jan 2021 81384 Views
Happy New Year: Jan 1, 2021 security cert expiration causes havoc for some Check Point VPN users

Patch FortiOS SSL VPN Vulnerability (CVE-2018-13379) Immediately

Recently a threat actor (attacker) shared a list of IP addresses related to the exploit of over 49,000 Fortinet VPN devices that are vulnerable to CVE-2018-13379 [1]. The exploitation could allow
8 Dec 2020 3404 Views
Patch FortiOS SSL VPN Vulnerability (CVE-2018-13379) Immediately

HKCERT Security Newsletter (December 2020 Issue)

Cover Story [Blog] Enterprise VPN Security Guideline [Security Guideline] Enterprise VPN Security Guideline [FB Post] Enterprise VPN Security Guideline Hot topics [Blog] Case Study
2 Dec 2020 89 Views
HKCERT Security Newsletter (December 2020 Issue)

Personal VPN Security Guideline

Objective Virtual private network (VPN) is one of the commonly used security technologies that have been widely used in an enterprise environment for employee remote access. On the other hand
24 Nov 2020 1862 Views
Personal VPN Security Guideline

Apple Lets Some of its Big Sur macOS Apps Bypass Firewall and VPNs

18 Nov 2020 74252 Views

Case Study on Bitcoin Scam Incident - A Combined Social Engineering and Privilege Escalation Attacks

, the scammers recently began conducting a voice phishing attack that combined phone calls and phishing sites to steal VPN credentials from employees[8]. The attackers used this method to get access
17 Nov 2020 3544 Views
Case Study on Bitcoin Scam Incident - A Combined Social Engineering and Privilege Escalation Attacks

We use cookies to give you the best possible experience on our website. By continuing to browse this site, you give consent for cookies to be used. For more details please read our Cookie Policy.

PRIVACY POLICY