News · Topic
Security flaws already being exploited in products SMEs use —firewalls, VPNs, email— and what needs updating.
Vulnerabilities
Check Point confirms that a critical flaw in its firewalls' VPN, fixed on 9 September, has been exploited since 12 September against customers of Spark, its range for small and medium-sized businesses. If your company has a Check Point, it's time to confirm it's up to date.
· 3 min read
Vulnerabilities
Two RouterOS flaws let attackers into a MikroTik router's administration without a password, according to CERT Polska, and CISA considers them exploited. The patch has been available since 3 September. If your office uses a MikroTik, check its version and whether it can be managed from the internet.
· 3 min read
Vulnerabilities
CISA has added a FortiOS flaw that Fortinet fixed in January to its catalogue of exploited vulnerabilities. According to SOCRadar, it has been used since July to install PivotC2, a backdoor on the firewall itself. If your company has a FortiGate, the question is simple: is it up to date?
· 3 min read