Network Security - Security Ticks

DrayTek Vulnerabilities Added to CISA KEV Catalog Exploited in Global Campaign

CISA KEV, DrayTek, exploited, Network Security / SecurityTicks

DrayTek Vulnerabilities Added to CISA KEV Catalog Exploited in Global Campaign 2024-09-05 at 14:16 By Eduard Kovacs Two DrayTek vulnerabilities added by CISA to its KEV catalog have been exploited by multiple threat groups to steal data from organizations worldwide. The post DrayTek Vulnerabilities Added to CISA KEV Catalog Exploited in Global Campaign appeared first […]

React to this headline:

DrayTek Vulnerabilities Added to CISA KEV Catalog Exploited in Global Campaign Read More »

China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches

Cisco, Nation-State, Network Security, Vulnerabilities, vulnerability / SecurityTicks

China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches 2024-08-22 at 20:03 By Kevin Townsend Hackers gained access to the switch using valid administrator credentials, and then ‘jailbroke’ from the application level into the OS level. The post China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches

React to this headline:

China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches Read More »

Reframing the ZTNA vs. SASE Debate

Identity & Access, Network Security, SASE, ZTNA / SecurityTicks

Reframing the ZTNA vs. SASE Debate 2024-08-13 at 17:01 By Etay Maor While ZTNA can be deployed independently, it is an integral component of the SASE architecture as well. The post Reframing the ZTNA vs. SASE Debate appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Reframing the ZTNA vs. SASE Debate Read More »

ZeroTier Raises $13.5 Million in Series A Funding

Cybersecurity Funding, Network Security, ZeroTier / SecurityTicks

ZeroTier Raises $13.5 Million in Series A Funding 2024-07-30 at 10:46 By Ionut Arghire Virtual networking provider ZeroTier has raised $13.5 million in a Series A funding round led by Battery Ventures. The post ZeroTier Raises $13.5 Million in Series A Funding appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

ZeroTier Raises $13.5 Million in Series A Funding Read More »

CISA, FBI Urge Immediate Action on OS Command Injection Vulnerabilities in Network Devices

Network Security / SecurityTicks

CISA, FBI Urge Immediate Action on OS Command Injection Vulnerabilities in Network Devices 2024-07-11 at 14:46 By Ionut Arghire In response to recent intrusions, CISA and the FBI are urging businesses and device manufacturers to eliminate OS command injection vulnerabilities at the source. The post CISA, FBI Urge Immediate Action on OS Command Injection Vulnerabilities

React to this headline:

CISA, FBI Urge Immediate Action on OS Command Injection Vulnerabilities in Network Devices Read More »

Palo Alto Networks Addresses BlastRADIUS Vulnerability, Fixes Critical Bug in Expedition Tool

BlastRADIUS, Network Security, Vulnerabilities / SecurityTicks

Palo Alto Networks Addresses BlastRADIUS Vulnerability, Fixes Critical Bug in Expedition Tool 2024-07-11 at 14:01 By Ionut Arghire Palo Alto Networks patched a critical vulnerability in its Expedition tool and addressed the impact of the recently disclosed BlastRADIUS vulnerability. The post Palo Alto Networks Addresses BlastRADIUS Vulnerability, Fixes Critical Bug in Expedition Tool appeared first

React to this headline:

Palo Alto Networks Addresses BlastRADIUS Vulnerability, Fixes Critical Bug in Expedition Tool Read More »

BlastRADIUS Attack Exposes Critical Flaw in 30-Year-Old RADIUS Protocol

BlastRADIUS, Featured, Identity & Access, InkBridge Networks, man-in-the-middle, Network Security, RADIUS, Vulnerabilities / SecurityTicks

BlastRADIUS Attack Exposes Critical Flaw in 30-Year-Old RADIUS Protocol 2024-07-09 at 20:22 By Ryan Naraine Security vendor InkBridge Networks calls urgent attention to the discovery of a decades-old design flaw (CVE-2024-3596) in the popular RADIUS protocol. The post BlastRADIUS Attack Exposes Critical Flaw in 30-Year-Old RADIUS Protocol appeared first on SecurityWeek. This article is an

React to this headline:

BlastRADIUS Attack Exposes Critical Flaw in 30-Year-Old RADIUS Protocol Read More »

Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers

D-Link, Network Security, router / SecurityTicks

Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers 2024-07-01 at 15:31 By Ionut Arghire GreyNoise observes the first attempts to exploit a path traversal vulnerability in discontinued D-Link DIR-859 WiFi routers. The post Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers Read More »

US, Allies Publish Guidance on Securing Network Access

CISA, guidance, Network Security / SecurityTicks

US, Allies Publish Guidance on Securing Network Access 2024-06-19 at 15:50 By Ionut Arghire Government agencies in the US, New Zealand, and Canada have published new guidance on improving network security. The post US, Allies Publish Guidance on Securing Network Access appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

US, Allies Publish Guidance on Securing Network Access Read More »

Edge Devices: The New Frontier for Mass Exploitation Attacks

Edge Devices, Network Security / SecurityTicks

Edge Devices: The New Frontier for Mass Exploitation Attacks 2024-06-14 at 17:31 By Kevin Townsend The increase in mass exploitation involving edge services and devices is likely to worsen. The post Edge Devices: The New Frontier for Mass Exploitation Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Edge Devices: The New Frontier for Mass Exploitation Attacks Read More »

FCC Proposes BGP Security Reporting for Broadband Providers

BGP, Network Security / SecurityTicks

FCC Proposes BGP Security Reporting for Broadband Providers 2024-06-07 at 15:17 By Ionut Arghire The FCC proposes that broadband providers plan for BGP security and provide quarterly reports on implemented risk mitigations. The post FCC Proposes BGP Security Reporting for Broadband Providers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

FCC Proposes BGP Security Reporting for Broadband Providers Read More »

Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking

Cox, Featured, modem, Network Security, vulnerability / SecurityTicks

Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking 2024-06-04 at 13:25 By Eduard Kovacs Cox recently patched a series of vulnerabilities that could have allowed hackers to remotely take control of millions of modems. The post Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking Read More »

Cloudflare Expands Zero Trust Capabilities with Acquisition of BastionZero

BastionZero, cloud security, Cloudflare, Identity & Access, Network Security, seed-stage, ZTNA / SecurityTicks

Cloudflare Expands Zero Trust Capabilities with Acquisition of BastionZero 2024-05-30 at 20:31 By Ryan Naraine Cloudlfare acquires Boston seed-stage startup BastionZero to bolster its Zero Trust Network Access technology portfolio. The post Cloudflare Expands Zero Trust Capabilities with Acquisition of BastionZero appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Cloudflare Expands Zero Trust Capabilities with Acquisition of BastionZero Read More »

8 Degrees of Secure Access Service Edge

Network Security, SASE / SecurityTicks

8 Degrees of Secure Access Service Edge 2024-05-30 at 15:01 By Etay Maor Assembling a diverse team, outlining clear objectives, and meticulously assessing your network landscape can enable organizations to successfully navigate SASE migration without hiccups and pitfalls. The post 8 Degrees of Secure Access Service Edge appeared first on SecurityWeek. This article is an

React to this headline:

8 Degrees of Secure Access Service Edge Read More »

QNAP Rushes Patch for Code Execution Flaw in NAS Devices

exploit code, NAS, Network Security, QNAP, remote code execution, Vulnerabilities / SecurityTicks

QNAP Rushes Patch for Code Execution Flaw in NAS Devices 2024-05-21 at 19:46 By Ionut Arghire QNAP rolls out patches for multiple vulnerabilities after proof-of-concept exploit published for a remote code execution vulnerability. The post QNAP Rushes Patch for Code Execution Flaw in NAS Devices appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

QNAP Rushes Patch for Code Execution Flaw in NAS Devices Read More »

Alkira Raises $100 Million for Secure Network Infrastructure Platform

Alkira, critical infrastructure, Funding/M&A, Network Security, Series C / SecurityTicks

Alkira Raises $100 Million for Secure Network Infrastructure Platform 2024-05-16 at 18:01 By Ionut Arghire Network infrastructure as-a-service Alkira has raised $100 million in a Series C funding round led by Tiger Global Management. The post Alkira Raises $100 Million for Secure Network Infrastructure Platform appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Alkira Raises $100 Million for Secure Network Infrastructure Platform Read More »

Cinterion Modem Flaws Pose Risk to Millions of Devices in Industrial, Other Sectors

ICS/OT, modem, Network Security, vulnerability / SecurityTicks

Cinterion Modem Flaws Pose Risk to Millions of Devices in Industrial, Other Sectors 2024-05-13 at 17:46 By Ionut Arghire A critical vulnerability in the Cinterion cellular modems can be exploited for remote code execution via SMS messages. The post Cinterion Modem Flaws Pose Risk to Millions of Devices in Industrial, Other Sectors appeared first on

React to this headline:

Cinterion Modem Flaws Pose Risk to Millions of Devices in Industrial, Other Sectors Read More »

Accenture Lands $789 Million Contract to Bolster U.S. Navy Cybersecurity

Accenture, Government, Network Security, SHARKCAGE / SecurityTicks

Accenture Lands $789 Million Contract to Bolster U.S. Navy Cybersecurity 2024-05-09 at 22:46 By SecurityWeek News Accenture Federal Services wins $789 million U.S. Navy SHARKCAGE cybersecurity contract. The post Accenture Lands $789 Million Contract to Bolster U.S. Navy Cybersecurity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Accenture Lands $789 Million Contract to Bolster U.S. Navy Cybersecurity Read More »

Network Security Firm Corelight Raises $150 Million

Cybersecurity Funding, funding, Network Security / SecurityTicks

Network Security Firm Corelight Raises $150 Million 2024-05-02 at 17:16 By Ionut Arghire Network detection and response (NDR) provider Corelight has raised $150 million in a Series D funding round led by Accel. The post Network Security Firm Corelight Raises $150 Million appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Network Security Firm Corelight Raises $150 Million Read More »

Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data

Cuttlefish, HiatusRAT, Malware & Threats, Nation-State, Network Security, router / SecurityTicks

Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data 2024-05-01 at 18:33 By Ryan Naraine Cuttlefish malware platform roaming around enterprise SOHO routers capable of covertly harvesting public cloud authentication data from internet traffic. The post Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data Read More »