The ransomware cartel that masterminded the Colonial Pipeline attack early last month crippled the pipeline operator's network using a compromised virtual private network (VPN) account password, the latest investigation into the incident has revealed. The development, which was reported by Bloomberg on Friday, involved gaining an initial foothold into the networks as early as … [Read more...] about Hackers Breached Colonial Pipeline Using Compromised VPN Password
VPN
Chinese Cyber Espionage Hackers Continue to Target Pulse Secure VPN Devices
Cybersecurity researchers from FireEye unmasked additional tactics, techniques, and procedures (TTPs) adopted by Chinese threat actors who were recently found abusing Pulse Secure VPN devices to drop malicious web shells and exfiltrate sensitive information from enterprise networks. FireEye's Mandiant threat intelligence team, which is tracking the cyberespionage activity under … [Read more...] about Chinese Cyber Espionage Hackers Continue to Target Pulse Secure VPN Devices
New High-Severity Vulnerability Reported in Pulse Connect Secure VPN
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated remote attacker to execute arbitrary code with elevated privileges. "Buffer Overflow in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code … [Read more...] about New High-Severity Vulnerability Reported in Pulse Connect Secure VPN
Critical Flaws Reported in Cisco VPN Routers for Businesses—Patch ASAP
Cisco has rolled out fixes for multiple critical vulnerabilities in the web-based management interface of Small Business routers that could potentially allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. The flaws — tracked from CVE-2021-1289 through CVE-2021-1295 (CVSS score 9.8) — impact RV160, RV160W, RV260, RV260P, and … [Read more...] about Critical Flaws Reported in Cisco VPN Routers for Businesses—Patch ASAP
SonicWall Hacked Using 0-Day Bugs In Its Own VPN Product
SonicWall, a popular internet security provider of firewall and VPN products, on late Friday disclosed that it fell victim to a coordinated attack on its internal systems. The San Jose-based company said the attacks leveraged zero-day vulnerabilities in SonicWall secure remote access products such as NetExtender VPN client version 10.x and Secure Mobile Access (SMA) that are … [Read more...] about SonicWall Hacked Using 0-Day Bugs In Its Own VPN Product
Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products
Zyxel has released a patch to address a critical vulnerability in its firmware concerning a hardcoded undocumented secret account that could be abused by an attacker to login with administrative privileges and compromise its networking devices. The flaw, tracked as CVE-2020-29583 (CVSS score 7.8), affects version 4.60 present in wide-range of Zyxel devices, including Unified … [Read more...] about Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products
Fortinet VPN with Default Settings Leave 200,000 Businesses Open to Hackers
As the pandemic continues to accelerate the shift towards working from home, a slew of digital threats have capitalized on the health concern to exploit weaknesses in the remote work infrastructure and carry out malicious attacks. Now according to network security platform provider SAM Seamless Network, over 200,000 businesses that have deployed the Fortigate VPN solution to … [Read more...] about Fortinet VPN with Default Settings Leave 200,000 Businesses Open to Hackers
Mozilla Launches ‘Firefox Private Network’ VPN Service as a Browser Extension
Mozilla has officially launched a new privacy-focused VPN service, called Firefox Private Network, as a browser extension that aims to encrypt your online activity and limit what websites and advertisers know about you.Firefox Private Network service is currently in beta and available only to desktop users in the United States as part of Mozilla's recently expunged "Firefox … [Read more...] about Mozilla Launches ‘Firefox Private Network’ VPN Service as a Browser Extension
Pay Once and Use for Lifetime: 10 VPN Services
A VPN, or Virtual Private Network, is a secure tunnel between two or more devices. VPNs are used to protect private web traffic from snooping, interference, and censorship. Use VPN to hide your IP and location, encrypt your communications, view blocked websites and streaming services from anywhere and stay safe from hackers and thieves. Below is a list of 10 VPN services. … [Read more...] about Pay Once and Use for Lifetime: 10 VPN Services
OneVPN: Lifetime Subscription for $29
Enjoy an Ad-Free, Completely Secure Internet Experience with OneVPN Buy now and get 75% off KEY FEATURES VPNs offer an invaluable service, cleaning up your internet experience, while keeping you anonymous from hackers and government snoops who may be monitoring your activity. OneVPN provides this secure browsing service on a budget, while maintaining high … [Read more...] about OneVPN: Lifetime Subscription for $29