Vulnerabilities
Palo Alto Networks has confirmed that a recently patched firewall vulnerability tracked as CVE-2025-0108 is being actively exploited.
Hi, what are you looking for?
SecurityWeek
All posts tagged "firewall"
Vulnerabilities
The exploitation of a recent SonicWall vulnerability has started shortly after proof-of-concept (PoC) code was published.
Vulnerabilities
Attempts to exploit CVE-2024-0108, an authentication bypass vulnerability in Palo Alto firewalls, started one day after disclosure.
Vulnerabilities
Palo Alto Networks has published 10 new security advisories, including one for a high-severity firewall authentication bypass vulnerability.
Data Breaches
Hackers have leaked 15,000 Fortinet firewall configurations, which were apparently obtained as a result of exploitation of CVE-2022–40684.
Vulnerabilities
Threat actors are exploiting a recent GFI KerioControl firewall vulnerability that leads to remote code execution.
Vulnerabilities
Palo Alto Networks has patched CVE-2024-3393, a vulnerability that has been exploited for DoS attacks against the company’s firewalls.
Vulnerabilities
Sophos has released patches for a critical-severity firewall vulnerability that could lead to remote code execution.
Tracking & Law Enforcement
The US government announced charges, sanctions and a reward for Guan Tianfeng, a Chinese national accused of involvement in Sophos firewall hacks.
Vulnerabilities
A second vulnerability in Zyxel firewalls has been exploited in Helldown ransomware attacks over the past weeks.
Malware & Threats
The number of internet-exposed Palo Alto firewalls is dropping, but 2,000 have been compromised, according to Shadowserver Foundation.
Vulnerabilities
Palo Alto Networks has confirmed that a zero-day is being exploited in attacks after investigating claims of a firewall remote code execution flaw.
Nation-State
The FBI is asking for information on the Chinese threat actors targeting Sophos edge devices to compromise private and government entities.
Vulnerabilities
SonicWall is warning customers that the recently patched critical vulnerability CVE-2024-40766 may be exploited in the wild.
Malware & Threats
A state-sponsored threat actor has been exploiting a zero-day in Palo Alto Networks firewalls for the past two weeks.
Vulnerabilities
Palo Alto Networks warns of limited exploitation of a critical command injection vulnerability leading to code execution on firewalls.
Network Security
Zyxel patches at least 15 security flaws that expose users to authentication bypass, command injection and denial-of-service attacks.
Network Security
Zyxel urges customers to update ATP, USG Flex, VPN, and ZyWALL/USG firewalls to prevent exploitation of recent vulnerabilities.
Vulnerabilities
A critical-severity vulnerability in Zyxel’s ATP, USG FLEX, VPN, and ZyWALL/USG firewalls can be exploited remotely for OS command execution.
Malware & Threats
Iran has the “geopolitical motivations” and a recent history of targeting water systems, experts pointed out.
Artificial Intelligence
Artificial Intelligence
Identity & Access
Vulnerabilities
Vulnerabilities
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
