NetSec News Articles of Interest From the Week of January 20, 2025
Read more cybersecurity news in this edition of NetSec News.
Hackers Leak Configs and VPN Credentials for 15,000 FortiGate Devices
A new hacking group has leaked the configuration files, IP addresses, and VPN credentials for over 15,000 FortiGate devices for free on the dark web, exposing a great deal of sensitive technical information to other cybercriminals. (BleepingComputer)
 |
|
“According to researchers who analyzed the data, the data that was disclosed appears to have been collected back in 2022 and is related to a previous FortiGate Zer0-day (CVE-2022–40684). That said, Fortinet appliances have been heavily targeted in recent years and it stands to reason that they wont stop being targeted any time soon. While there is little to do when it comes to your IP address for your org, as threat actors tend to just throw things at any IP out there to see if something sticks, your firewall credentials and even VPN credentials should be rotated on some recurring basis as many take the set it and forget it mentality once they have set the initial passwords. While MFA is a great countermeasure, additional solutions such as hardware security keys are highly recommended where applicable. In addition, this also highlights the importance of patch management and being vigilant of reports for any known Zer0-Days and other vulnerabilities when they arise as there is plenty of important information that can be gleaned from these reports. Case in point is the recent report that a 10-year-old Cisco vulnerability is actively being exploited due to Adaptive Security Appliances not being properly patched.” –Craig Flynn, SOC Manager at C3 Integrated Solutions |
CISA Shares Guidance for Microsoft Expanded Logging Capabilities
CISA shared guidance for government agencies and enterprises on using expanded cloud logs in their Microsoft 365 tenants as part of their forensic and compliance investigations. (BleepingComputer)
FTC Takes Action Against GoDaddy for Alleged Lax Data Security for Its Website Hosting Services
The Federal Trade Commission will require web hosting company GoDaddy to implement a robust information security program to settle charges that the company failed to secure its website-hosting services against attacks that could harm its customers and visitors to the customers’ websites. (Federal Trade Commission (FTC))
Chrome 132 Patches 16 Vulnerabilities
Google on Tuesday announced the release of Chrome 132 to the stable channel with 16 security fixes, including 13 that resolve vulnerabilities reported by external researchers. Of the externally reported flaws, five are high-severity bugs affecting browser components such as the V8 JavaScript engine, Navigation, the open source 2D graphics library Skia, Metrics, and Tracing. (SecurityWeek)
Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation
Microsoft has shed light on a now-patched security flaw impacting Apple macOS that, if successfully exploited, could have allowed an attacker running as “root” to bypass the operating system’s System Integrity Protection (SIP) and install malicious kernel drivers by loading third-party kernel extensions. (The Hacker News)
FTC Orders GM To Stop Collecting and Selling Driver’s Data
The Federal Trade Commission (FTC) is taking action against General Motors (GM) and its subsidiary, OnStar, for unlawful collection and selling drivers’ precise geolocation and driving behavior data from millions of vehicles. (BleepingComputer)
FBI Uses Malware’s Own ‘Self-Delete’ Trick to Erase Chinese PlugX From US Computers
The FBI, working in tandem with law enforcement authorities in France, have turned the PlugX malware’s own self-delete mechanism against it, erasing the China-linked remote access trojan from more than 4,200 infected computers in the United States. (SecurityWeek)
Meet the Author
