1/3 Fortinet warns of a critical zero-day (#CVE202455591) in FortiOS & FortiProxy, exploited to hijack firewalls and gain super-admin access. Affected versions: 7.0.0-7.0.16, 7.0.0-7.0.19, 7.2.0-7.2.12. #Fortinet#ZeroDay#CyberSecurity
https://t.co/xNYh2SbBgt
3/3 Mitigation: Fortinet urges patching systems or disabling HTTP/HTTPS admin interfaces, limiting access via local-in policies, and disabling public management access. #CyberDefense#SecurityPatch#FortinetSecurity
1/3 Fortinet warns of a critical zero-day (#CVE202455591) in FortiOS & FortiProxy, exploited to hijack firewalls and gain super-admin access. Affected versions: 7.0.0-7.0.16, 7.0.0-7.0.19, 7.2.0-7.2.12. #Fortinet#ZeroDay#CyberSecurity
https://t.co/xNYh2SbBgt
2/3 Attackers exploit the zero-day to create rogue admin users, modify firewall policies, and access internal networks via SSL VPN. Arctic Wolf traces the exploitation timeline from Nov 2024 to Dec 2024, with a probable zero-day as the access vector. #FortiOS#FortiProxy#SSLVPN
🚨 CISA adds critical #BeyondTrust vulnerability #CVE202412686 to #KEV catalog, warning of potential exploitation. This flaw allows admins to upload malicious files, enabling OS command execution as the site user #Cybersecurity
🚨 #CISA released advisory on 2023 #Top#Routinely#Exploited Vulnerabilities.
These are frequently targeted by attackers, leading to critical #breaches. Here are the top 15 vulnerabilities to secure against:
https://t.co/WsXQVEukKM
#Vulnerabilities
3/3 Fog/Akira accessed compromised systems via VPN/VPS to obscure IPs, accelerating their intrusions. All affected endpoints were running unpatched SonicWall software, underscoring the urgency of timely updates. #datasecurity#patch
1/3 🚨 #Fog and #Akira#ransomware gangs are increasingly exploiting #SonicWall VPN accounts, likely using #CVE202440766, a critical access control flaw in SSL #VPN. SonicWall patched it in late August, but active exploits surfaced within a week. #cybersec https://t.co/lM7yLPckaL
2/3 Arctic Wolf reports 30+ intrusions by Fog/Akira ransomware, with most breaches tied to unpatched SonicWall VPNs. Time from access to data encryption has been as short as 2 hours, showing rapid attack capabilities. #ransomware#SonicWall#threatintel
🚨 Attackers are actively exploiting a critical FortiOS RCE vulnerability #CVE202423113, which could allow unauthenticated code execution on unpatched devices. Update ASAP! #cybersecurity#infosecurity
https://t.co/3nA6e39zOl
The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens.
https://t.co/IT8kH1CdEh
Security chips produced by Infineon Technologies have been found vulnerable to side-channel attacks.
#Crypto#CyberSecurity#infosec#yubikey
https://t.co/AVQ3B6He0l
🚨 #CISA has added 3 new vulnerabilities to #KEV catalog:
1/3 #CVE202120123: #Draytek#VigorConnect Path Traversal flaw in the DownloadFileServlet endpoint. Unauthenticated attackers could exploit it to download arbitrary files with root privileges
This video👇is of Tigran Gambaryan, the former US federal agent who led many of the biggest crypto crime cases in history. He's being charged in Nigeria with money laundering and tax evasion, entirely for the actions of his employer, Binance. He's now been jailed and denied medical care for a herniated disc in his back that requires surgery.
Here you can see that Nigerian officials have even denied him the use of a wheelchair or any help walking into the courtroom in an attempt to avoid embarrassing photos/videos of his condition.
Where is the the US @StateDept? Where is @SecBlinken? Where is @StateSPEHA Roger D. Carstens, for whom this case should have met the criteria to be treated as a hostage situation months ago?
Why isn't the US doing more to help this American citizen and former civil servant?
It's long past time to bring Tigran home.