SonicWall - Security Ticks

American Water shuts down systems after cyberattack

critical infrastructure, cyberattack, disruption, Don't miss, Hot stuff, News, SonicWall, USA / SecurityTicks

American Water shuts down systems after cyberattack 2024-10-08 at 13:16 By Zeljka Zorz American Water, the largest water and wastewater utility company in the US, has shut down some of its systems following a cyberattack. While the company confirmed that none of its water or wastewater facilities or operations have been negatively affected by the […]

React to this headline:

American Water shuts down systems after cyberattack Read More »

CISA confirms that SonicWall vulnerability is getting exploited (CVE-2024-40766)

Arctic Wolf Networks, CISA, Don't miss, firewall, Hot stuff, News, Ransomware, Rapid7, SonicWall, vulnerability / SecurityTicks

CISA confirms that SonicWall vulnerability is getting exploited (CVE-2024-40766) 2024-09-10 at 15:31 By Zeljka Zorz The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2024-40766 – a recently fixed improper access control vulnerability affecting SonicWall’s firewalls – to its Known Exploited Vulnerabilities catalog, thus confirming it is being actively exploited by attackers. Though the

React to this headline:

CISA confirms that SonicWall vulnerability is getting exploited (CVE-2024-40766) Read More »

Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks

exploited, Malware & Threats, SonicWall / SecurityTicks

Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks 2024-09-09 at 14:31 By Eduard Kovacs A recently patched SonicWall vulnerability tracked as CVE-2024-40766 may have been exploited in ransomware attacks. The post Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks Read More »

Recent SonicWall Firewall Vulnerability Potentially Exploited in the Wild

exploited, firewall, SonicWall, Vulnerabilities / SecurityTicks

Recent SonicWall Firewall Vulnerability Potentially Exploited in the Wild 2024-09-06 at 16:17 By Eduard Kovacs SonicWall is warning customers that the recently patched critical vulnerability CVE-2024-40766 may be exploited in the wild. The post Recent SonicWall Firewall Vulnerability Potentially Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Recent SonicWall Firewall Vulnerability Potentially Exploited in the Wild Read More »

Weekly IT Vulnerability Report: Cyble Researchers Find Nearly 1 Million Exposed Fortinet, SonicWall Devices

darkweb, Fortra, SonicWall, Threat Intelligence, Traccar, vulnerability / SecurityTicks

Weekly IT Vulnerability Report: Cyble Researchers Find Nearly 1 Million Exposed Fortinet, SonicWall Devices 2024-08-30 at 16:31 By dakshsharma16 Key Takeaways Overview Cyble’s weekly vulnerability report for August 21-27 found the highest number of exposed vulnerable assets in nearly three months, since a widespread PHP vulnerability was found in early June. Cyble researchers found more

React to this headline:

Weekly IT Vulnerability Report: Cyble Researchers Find Nearly 1 Million Exposed Fortinet, SonicWall Devices Read More »

SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766)

access control, CVE, Don't miss, firewall, Hot stuff, News, security update, SonicWall, vulnerability / SecurityTicks

SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766) 2024-08-26 at 21:32 By Zeljka Zorz SonicWall has patched a critical vulnerability (CVE-2024-40766) in its next-gen firewalls that could allow remote attackers unauthorized access to resources and, in specific conditions, to crash the appliances. About CVE-2024-40766 CVE-2024-40766 is an improper access control vulnerability in the “SonicWall SonicOS

React to this headline:

SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766) Read More »

SonicWall Patches Critical SonicOS Vulnerability

SonicWall, Vulnerabilities, vulnerability / SecurityTicks

SonicWall Patches Critical SonicOS Vulnerability 2024-08-26 at 16:16 By Eduard Kovacs SonicWall has patched CVE-2024-40766, a critical SonicOS vulnerability that can lead to unauthorized access or a firewall crash. The post SonicWall Patches Critical SonicOS Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

SonicWall Patches Critical SonicOS Vulnerability Read More »

Observations from Black Hat USA 2024, BSidesLV, and DEF CON 32

Artificial Intelligence, conferences, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, IoT, Microsoft, News, opinion, Privacy, SANS, Signal, software development, SonicWall, supply chain attacks / SecurityTicks

Observations from Black Hat USA 2024, BSidesLV, and DEF CON 32 2024-08-16 at 12:46 By Help Net Security I recently spent six days in Las Vegas attending DEF CON, BsidesLV, and Black Hat USA 2024, where I had the opportunity to engage with and learn from some of the top security experts in the world.

React to this headline:

Observations from Black Hat USA 2024, BSidesLV, and DEF CON 32 Read More »

Critical Apache OFBiz pre-auth RCE flaw fixed, update ASAP! (CVE-2024-38856)

Apache OFBiz, CVE, Don't miss, enterprise, Hot stuff, News, open source, SonicWall, vulnerability / SecurityTicks

Critical Apache OFBiz pre-auth RCE flaw fixed, update ASAP! (CVE-2024-38856) 2024-08-05 at 16:47 By Zeljka Zorz CVE-2024-38856, an incorrect authorization vulnerability affecting all but the latest version of Apache OFBiz, may be exploited by remote, unauthenticated attackers to execute arbitrary code on vulnerable systems. About CVE-2024-38856 Apache OFBiz is an open-source framework for enterprise resource

React to this headline:

Critical Apache OFBiz pre-auth RCE flaw fixed, update ASAP! (CVE-2024-38856) Read More »

Critical Splunk flaw can be exploited to grab passwords (CVE-2024-36991)

CVE, data analytics, Don't miss, enterprise, Hot stuff, News, security update, SonicWall, Splunk, vulnerability / SecurityTicks

Critical Splunk flaw can be exploited to grab passwords (CVE-2024-36991) 2024-07-18 at 18:01 By Zeljka Zorz A recently fixed vulnerability (CVE-2024-36991) affecting Splunk Enterprise on Windows “is more severe than it initially appeared,” according to SonicWall’s threat researchers. Several PoC exploits have been published, including one by IT consultant Mohamed Nabil Ali that performs bulk

React to this headline:

Critical Splunk flaw can be exploited to grab passwords (CVE-2024-36991) Read More »

SonicWall launches Cloud Secure Edge, suitable for any stage of cloud migration

Industry news, SonicWall / SecurityTicks

SonicWall launches Cloud Secure Edge, suitable for any stage of cloud migration 2024-07-18 at 16:31 By Industry News SonicWall launched Cloud Secure Edge (CSE), offering an innovative suite of Zero Trust Access offerings designed specifically for MSPs who are meeting customers with increasingly remote work forces on their cloud migration journeys. With flexible, cost-effective solutions

React to this headline:

SonicWall launches Cloud Secure Edge, suitable for any stage of cloud migration Read More »

High-risk Atlassian Confluence RCE fixed, PoC available (CVE-2024-21683)

Atlassian Confluence, CVE, Don't miss, Hot stuff, News, PoC, SonicWall, vulnerability / SecurityTicks

High-risk Atlassian Confluence RCE fixed, PoC available (CVE-2024-21683) 2024-06-03 at 12:16 By Zeljka Zorz If you’re self-hosting an Atlassian Confluence Server or Data Center installation, you should upgrade to the latest available version to fix a high-severity RCE flaw (CVE-2024-21683) for which a PoC and technical details are already public. About CVE-2024-21683 Confluence Server and

React to this headline:

High-risk Atlassian Confluence RCE fixed, PoC available (CVE-2024-21683) Read More »

Microsoft patches actively exploited security feature bypass vulnerability (CVE-2024-29988)

CISA, CVE, Don't miss, Hot stuff, Microsoft, News, Patch Tuesday, security update, SonicWall, Tenable, Trend Micro, vulnerability, vulnerability management / SecurityTicks

Microsoft patches actively exploited security feature bypass vulnerability (CVE-2024-29988) 2024-04-09 at 22:35 By Zeljka Zorz On this April 2024 Patch Tuesday, Microsoft has fixed a record 147 CVE-numbered vulnerabilities, including CVE-2024-29988, a vulnerability that Microsoft hasn’t marked as exploited, but Peter Girnus, senior threat researcher with Trend Micro’s Zero Day Initiative (ZDI), has found being

React to this headline:

Microsoft patches actively exploited security feature bypass vulnerability (CVE-2024-29988) Read More »

MSPs undergo transformation in response to persistent cyber threats

cybercrime, cybersecurity, MSP, News, Ransomware, report, SonicWall, survey, threats / SecurityTicks

MSPs undergo transformation in response to persistent cyber threats 2024-02-22 at 06:32 By Help Net Security 2Organizations are increasingly turning to Managed Service Providers (MSPs) to alleviate pressure on IT departments, according to SonicWall. Managed services have emerged as a game-changing solution, providing organizations with an additional human-layer of defense, addressing alert fatigue, and freeing

React to this headline:

MSPs undergo transformation in response to persistent cyber threats Read More »

180k Internet-Exposed SonicWall Firewalls Vulnerable to DoS Attacks, Possibly RCE

SonicWall, Vulnerabilities / SecurityTicks

180k Internet-Exposed SonicWall Firewalls Vulnerable to DoS Attacks, Possibly RCE 2024-01-16 at 16:16 By Ionut Arghire Two DoS vulnerabilities patched in 2022 and 2023 haunt nearly 180,000 internet-exposed SonicWall firewalls. The post 180k Internet-Exposed SonicWall Firewalls Vulnerable to DoS Attacks, Possibly RCE appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

180k Internet-Exposed SonicWall Firewalls Vulnerable to DoS Attacks, Possibly RCE Read More »

Escalating cyber threats: Bots, fraud farms, and cryptojacking surge, urgently requiring attention

Abnormal Security, Aqua Security, Arkose Labs, Armis, attack, cybersecurity, Don't miss, Hornetsecurity, Imperva, Netwrix, News, Orange Cyberdefense, report, SonicWall, SpyCloud, survey, WatchGuard / SecurityTicks

Escalating cyber threats: Bots, fraud farms, and cryptojacking surge, urgently requiring attention 2024-01-05 at 06:32 By Help Net Security The motivations behind cyberattacks are as diverse as the methods employed. Whether driven by financial gain, political agendas, or sheer malice, cybercriminals exploit weaknesses in cybersecurity defenses, seeking entry points to compromise sensitive data, disrupt critical

React to this headline:

Escalating cyber threats: Bots, fraud farms, and cryptojacking surge, urgently requiring attention Read More »

SonicWall Buys Banyan Security For ZTNA Technology

Banyan Security, Funding/M&A, Identity & Access, SonicWall / SecurityTicks

SonicWall Buys Banyan Security For ZTNA Technology 2024-01-03 at 18:31 By Ryan Naraine SonicWall announces the acquisition of Banyan Security, a deal that adds zero-trust network access tooling to its product portfolio. The post SonicWall Buys Banyan Security For ZTNA Technology appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

SonicWall Buys Banyan Security For ZTNA Technology Read More »

SonicWall acquires Banyan Security

Banyan Security, Industry news, SonicWall / SecurityTicks

SonicWall acquires Banyan Security 2024-01-03 at 15:02 By Industry News SonicWall acquired Banyan Security, a security service edge (SSE) solution provider. This acquisition strengthens SonicWall’s portfolio by adding zero trust security trusted by leading Fortune 100 companies to small businesses that are replacing legacy architectures for SSE solutions, including Zero Trust Network Access (ZTNA). “Cybersecurity’s

React to this headline:

SonicWall acquires Banyan Security Read More »

Cryptojacking soars as cyberattacks increase, diversify

cryptojacking, cybercriminals, cybersecurity, education, exploit, Government, healthcare, intrusion, IoT, Malware, News, Ransomware, report, SMBs, SonicWall / SecurityTicks

Cryptojacking soars as cyberattacks increase, diversify 27/07/2023 at 05:03 By Help Net Security Digital threat actors are adopting evolving tactical behaviors, opting for different types of malicious attacks compared to previous years, according to SonicWall. Overall intrusion attempts were up, led by the highest year on record for global cryptojacking volume recorded by SonicWall, as

React to this headline:

Cryptojacking soars as cyberattacks increase, diversify Read More »

SonicWall Patches Critical Vulnerabilities in GMS, Analytics Products

SonicWall, Vulnerabilities / SecurityTicks

SonicWall Patches Critical Vulnerabilities in GMS, Analytics Products 13/07/2023 at 14:47 By Ionut Arghire SonicWall patches four critical-severity vulnerabilities in its Global Management System (GMS) and Analytics products. The post SonicWall Patches Critical Vulnerabilities in GMS, Analytics Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

SonicWall Patches Critical Vulnerabilities in GMS, Analytics Products Read More »