firewall

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls

enterprise, FBI, firewall, Fortinet, News, SOCRadar /

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls 2026-10-07 at 16:43 By Sinisa Markovic Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, according to a joint FBI and U.S. Secret Service advisory. FortiBleed targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The […]

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls Read More »

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances

0-day, access management, Arista Networks, Check Point, CISA, CVE, Don't miss, F5 Networks, firewall, Hot stuff, MSP, News, SMBs /

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances 2026-09-23 at 13:22 By Zeljka Zorz Check Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July 23, 2026. The company also confirmed that a pre-authentication remote code […]

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances Read More »

Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)

APT, Cisco, Don't miss, firewall, Hot stuff, News, Ransomware, vulnerability /

Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316) 2026-09-10 at 14:22 By Zeljka Zorz State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC), which is used for centrally managing multiple Cisco Secure Firewall devices across a network. Two FMC vulnerabilities under […]

Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316) Read More »

Organizations Warned of Cisco Secure FMC Exploitation

Cisco, exploited, Featured, firewall, FMC, Vulnerabilities, vulnerability /

Organizations Warned of Cisco Secure FMC Exploitation 2026-09-10 at 13:06 By Eduard Kovacs Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026. The post Organizations Warned of Cisco Secure FMC Exploitation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Organizations Warned of Cisco Secure FMC Exploitation Read More »

AWS makes it easier to spot firewall rules that have gone quiet

AWS, Compliance, cybersecurity, firewall, network, News, security controls /

AWS makes it easier to spot firewall rules that have gone quiet 2026-08-24 at 07:00 By Anamarija Pogorelec AWS Network Firewall’s rule hit count capability gives security teams visibility into which stateful firewall rules are matching traffic, helping them identify unused or redundant rules and validate whether security controls are working as intended. The capability […]

AWS makes it easier to spot firewall rules that have gone quiet Read More »

Cisco Patches Firewall Zero-Day Exploited for DoS Attacks

Cisco, exploited, Featured, firewall, Vulnerabilities, vulnerability, Zero-Day /

Cisco Patches Firewall Zero-Day Exploited for DoS Attacks 2026-08-12 at 08:10 By Eduard Kovacs CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices. The post Cisco Patches Firewall Zero-Day Exploited for DoS Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches Firewall Zero-Day Exploited for DoS Attacks Read More »

AWS to retire Shield Advanced L7 automatic mitigation on January 1, 2027

AWS, DDoS, firewall, News, policy, security metrics, web application security /

AWS to retire Shield Advanced L7 automatic mitigation on January 1, 2027 2026-07-28 at 12:23 By Anamarija Pogorelec AWS Shield Advanced, a managed service that protects applications from external threats, is adding the Anti-DDoS managed rule group, designed for application-layer (L7) DDoS protection, to eligible web access control lists (ACLs) in Count mode. The addition […]

AWS to retire Shield Advanced L7 automatic mitigation on January 1, 2027 Read More »

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)

Check Point, CISA, configuration management, Don't miss, firewall, Hot stuff, News, security update, vulnerability /

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) 2026-07-23 at 13:42 By Zeljka Zorz Attackers are exploiting a critical authentication bypass vulnerability (CVE-2026-16232) that affects Check Point Security Management and Multi-Domain Security Management, the management servers that push policy to Check Point security gateways (i.e., firewalls). “An unauthenticated attacker can obtain […]

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) Read More »

20 open-source cybersecurity tools to keep your team ready for anything

agentic AI, AI, Application Security, containers, cybersecurity, Don't miss, Endpoint Security, Exabeam, firewall, GitHub, Hot stuff, LLMs, Microsoft, News, open source, OWASP, penetration testing, scanner, security telemetry, software, vulnerability assessment, Windows /

20 open-source cybersecurity tools to keep your team ready for anything 2026-07-08 at 08:30 By Anamarija Pogorelec AI is changing how security teams find vulnerabilities, analyze code, test applications, and protect infrastructure. Developers are building tools to secure AI systems themselves, from coding agents and memory protection to model exposure discovery. This roundup covers recent […]

20 open-source cybersecurity tools to keep your team ready for anything Read More »

74,000 Fortinet firewall credentials exposed in FortiBleed data leak

credentials, critical infrastructure, Data leak, data theft, Don't miss, enterprise, firewall, Fortinet, Government, Hot stuff, Hudson Rock, News, VPN /

74,000 Fortinet firewall credentials exposed in FortiBleed data leak 2026-06-18 at 15:10 By Zeljka Zorz A Russian-speaking cybercriminal group has stolen credentials contained in the configuration files of nearly 74,000 Fortinet firewalls and VPN gateways around the world. The data was accidentally exposed by the group on a server, along with other artifacts and tools, […]

74,000 Fortinet firewall credentials exposed in FortiBleed data leak Read More »

Product showcase: NetGuard open-source firewall for Android

Android, Don't miss, firewall, Google Play, network monitoring, News, open source, Product showcase, software /

Product showcase: NetGuard open-source firewall for Android 2026-05-08 at 08:17 By Anamarija Pogorelec NetGuard is a free, open-source firewall for Android phones and tablets that provides users with a simple way to block internet access. Android does not allow VPN services to be chained, so the app uses the Android VPN service to route all […]

Product showcase: NetGuard open-source firewall for Android Read More »

State-sponsored hackers likely behind zero-day attacks on Palo Alto firewalls

0-day, APT, Don't miss, firewall, government-backed attacks, Hot stuff, News, Palo Alto Networks /

State-sponsored hackers likely behind zero-day attacks on Palo Alto firewalls 2026-05-08 at 01:14 By Zeljka Zorz Palo Alto Networks believes the in-the-wild exploitation of a zero-day vulnerability (CVE-2026-0300) in its firewalls is likely the work of state-sponsored threat actors. A flaw with no patch (yet) CVE-2026-0300 is a buffer overflow vulnerability in the User-ID Authentication […]

State-sponsored hackers likely behind zero-day attacks on Palo Alto firewalls Read More »

Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking

China, China APT, exploited, firewall, Nation-State, Palo Alto Networks, Vulnerabilities, Zero-Day /

Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking 2026-05-07 at 19:01 By Eduard Kovacs The cybersecurity firm has not explicitly accused China of being behind the attack, but the evidence suggests it was.  The post Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking appeared first on SecurityWeek. […]

Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking Read More »

Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls

exploited, firewall, Palo Alto Networks, Vulnerabilities, vulnerability, Zero-Day /

Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls 2026-05-06 at 09:24 By Eduard Kovacs CVE-2026-0300 affects the Captive Portal service of PAN-OS software on PA and VM series firewalls. The post Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls Read More »

Pipelock: Open-source AI agent firewall

agentic AI, AI, cybersecurity, Don't miss, firewall, GitHub, Hot stuff, News, open source /

Pipelock: Open-source AI agent firewall 2026-05-04 at 09:46 By Mirko Zorz AI coding agents run with shell access, environment variables containing API keys, and unrestricted internet connectivity, creating a single point of failure where one compromised tool call can leak credentials to an attacker-controlled domain. Pipelock, an open-source security harness developed by Joshua Waldrep under […]

Pipelock: Open-source AI agent firewall Read More »

SonicWall Urges Immediate Patching of Firewall Vulnerabilities

firewall, patches, SonicWall, Vulnerabilities, vulnerability /

SonicWall Urges Immediate Patching of Firewall Vulnerabilities 2026-04-30 at 18:18 By Ionut Arghire The bugs could be exploited to bypass security controls, access restricted services, and crash firewalls. The post SonicWall Urges Immediate Patching of Firewall Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall Urges Immediate Patching of Firewall Vulnerabilities Read More »

Product showcase: LuLu reveals unauthorized outbound connections from Mac apps

cybersecurity, firewall, macOS, network monitoring, News /

Product showcase: LuLu reveals unauthorized outbound connections from Mac apps 2026-04-27 at 07:03 By Anamarija Pogorelec LuLu is a free, open-source firewall for macOS that lets you control which apps are allowed to send data from your computer. macOS includes a built-in firewall, but it mainly handles incoming connections. LuLu also monitors outgoing traffic. Installing […]

Product showcase: LuLu reveals unauthorized outbound connections from Mac apps Read More »

New Cisco firewall malware can only be killed by pulling the plug

backdoor, CISA, Cisco, Don't miss, firewall, government-backed attacks, Hot stuff, NCSC, News /

New Cisco firewall malware can only be killed by pulling the plug 2026-04-24 at 13:17 By Zeljka Zorz Suspected state-sponsored attackers are using a custom backdoor to persistently compromise Cisco security devices (firewalls), the US CISA and the UK National Cyber Security Centre warned on Thusday. “The [Firestarter] malware (…) is relevant for both Cisco […]

New Cisco firewall malware can only be killed by pulling the plug Read More »

Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876)

Don't miss, enterprise, firewall, Hot stuff, News, OWASP, Progress, security update, vulnerability, web application security /

Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876) 2026-04-22 at 14:47 By Zeljka Zorz Progress Software has fixed a slew of high-severity vulnerabilities in MOVEit WAF and LoadMaster, including a flaw (CVE-2026-21876) that may allow attackers to bypass firewall detection. MOVEit WAF (web application firewall) is designed to protect Progress’s managed file transfer platform MOVEit […]

Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876) Read More »

Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131)

0-day, AWS, Cisco, Don't miss, enterprise, firewall, Hot stuff, News, Ransomware /

Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131) 2026-03-20 at 15:21 By Zeljka Zorz A critical vulnerability (CVE-2026-20131) in Cisco Secure Firewall Management Center (FMC) that Cisco disclosed and patched in early March 2026 has been exploited as a zero-day by the Interlock ransomware gang, Amazon CISO and VP of Security Engineering […]

Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131) Read More »

Scroll to Top