#firewallsecurity — Public Fediverse posts

Fortinet FortiGate admins are observing exploitation patterns consistent with CVE-2025-59718 even on patched systems, suggesting incomplete mitigation in earlier updates.

Reports include SSO-based admin creation and activity aligned with previously documented attacks. Additional FortiOS releases are expected.

The situation reinforces the need for defense-in-depth around identity, logging, and privileged access.

Source: https://www.bleepingcomputer.com/news/security/fortinet-admins-report-patched-fortigate-firewalls-getting-hacked/

Follow @technadu for neutral, operationally focused security reporting.

#Infosec #Fortinet #FirewallSecurity #IAM #VulnerabilityManagement #TechNadu

The Sony PlayStation hack of 2011 is considered the worst breach in gaming history. With 77 million users affected, this episode is often used as an example of the importance of timely patching of servers and firewall security.
Here's what happened and the lessons learnt.

#serverSecurity #patchDay #firewallSecurity #PSNhack #PlayStation #gaming

https://negativepid.blog/the-sony-playstation-network-hack/
https://negativepid.blog/the-sony-playstation-network-hack/

A critical flaw in WatchGuard Firebox firewalls could let hackers remotely take control—one overlooked bug may expose your entire network. Are your defenses up to date? Read the details.

https://thedefendopsdiaries.com/critical-watchguard-firebox-vulnerability-cve-2025-9242-highlights-urgency-of-proactive-firewall-security/

#watchguard
#firewallsecurity
#cve20259242
#vulnerabilitymanagement
#patching
#remotecodeexecution
#cybersecurity
#networksecurity
#ransomware

Cisco's firewall may have a secret opening—an RCE flaw in its RADIUS system lets attackers run commands remotely if left unpatched. Curious about how this could jeopardize your network security?

https://thedefendopsdiaries.com/understanding-and-mitigating-the-rce-vulnerability-in-ciscos-secure-firewall-management-center/

#cisco
#firewallsecurity
#rce
#cybersecurity
#networksecurity

Not sure if a traditional firewall is for you? Next-generation firewalls are like firewalls with superpowers. However, they come with challenges. The feature that allows most of their advanced functions is decryption, and that has lots of potential downsides. Knowing your environment, users, and use cases is key in deciding what your next firewall will be.

#firewalls #NGFW #howToChooseAFirewall #firewallSecurity #negativePID

https://negativepid.com/how-to-choose-a-firewall-for-your-business-traditional-firewalls-vs-next-generation-firewalls/

"🔒 Sophos Backports RCE Fix: Proactive Response to Firewall Vulnerabilities 🛡️"

Sophos addressed a critical code injection vulnerability (CVE-2022-3236) in their firewall's User Portal and Webadmin, facilitating remote code execution. Originally fixed in Sep 2022, Sophos proactively backported this fix to unsupported EOL firmware after recent exploit attempts. This move underscores the risk EOL devices pose and highlights the importance of timely updates. Sophos' swift response with an auto-applied hotfix for 99% of affected systems showcases a strong commitment to cybersecurity. 🚨🖥️

For those unable to update, restricting WAN access and using VPN or Sophos Central is advised. Stay vigilant and keep your systems updated!

CVE-2022-3236 Details: A code injection vulnerability allowing remote code execution in Sophos Firewall versions up to v19.0 MR1.

Article by Bill Toulas BleepingComputer🔗

Tags: #Sophos #Cybersecurity #FirewallSecurity #VulnerabilityManagement #RCE #CVE20223236 #InfoSec #EOLRisk #SystemUpdates 🌐🔑🛡️

"🔒 Sophos Backports RCE Fix: Proactive Response to Firewall Vulnerabilities 🛡️"

Sophos addressed a critical code injection vulnerability (CVE-2022-3236) in their firewall's User Portal and Webadmin, facilitating remote code execution. Originally fixed in Sep 2022, Sophos proactively backported this fix to unsupported EOL firmware after recent exploit attempts. This move underscores the risk EOL devices pose and highlights the importance of timely updates. Sophos' swift response with an auto-applied hotfix for 99% of affected systems showcases a strong commitment to cybersecurity. 🚨🖥️

For those unable to update, restricting WAN access and using VPN or Sophos Central is advised. Stay vigilant and keep your systems updated!

CVE-2022-3236 Details: A code injection vulnerability allowing remote code execution in Sophos Firewall versions up to v19.0 MR1.

Article by Bill Toulas BleepingComputer🔗

Tags: #Sophos #Cybersecurity #FirewallSecurity #VulnerabilityManagement #RCE #CVE20223236 #InfoSec #EOLRisk #SystemUpdates 🌐🔑🛡️