Geek-Guy.com

Tag: firewalls

Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257)

Authentication bypass vulnerabilities (CVE-2026-0257) in Palo Alto Networks’ firewalls that the company disclosed on May 13 have been targeted in “limited exploit attempts”. “Across multiple customers, Rapid7 observed successful exploitation via authentication probes using forged cookies, but the appliance accepted the cookie without a full VPN session being established in 8 out of 10 impacted…

State-sponsored hackers likely behind zero-day attacks on Palo Alto firewalls

Palo Alto Networks believes the in-the-wild exploitation of a zero-day vulnerability (CVE-2026-0300) in its firewalls is likely the work of state-sponsored threat actors. A flaw with no patch (yet) CVE-2026-0300 is a buffer overflow vulnerability in the User-ID Authentication Portal service of Palo Alto Networks PAN-OS software, and can be exploited by unauthenticated attackers sending…

Root-level RCE vulnerability in Palo Alto firewalls exploited (CVE-2026-0300)

A critical vulnerability (CVE-2026-0300) affecting Palo Alto Networks firewalls is being actively exploited by attackers, the security company acknowledged today, and urged customers to implement mitigations as they are still working on fixes. About CVE-2026-0300 CVE-2026-0300 is a buffer overflow vulnerability in the User-ID Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS…

SonicWall patches three SonicOS flaws in Gen 6, 7 and 8 firewalls. Patch them now

SonicWall patches three SonicOS flaws in Gen 6, 7 and 8 firewalls. The company released firmware updates to block bypass attacks and unauthorized access. SonicWall released urgent firmware updates to fix three SonicOS vulnerabilities affecting Gen 6, Gen 7, and Gen 8 firewalls. The flaws could allow attackers to bypass security controls, access restricted services,…

9 Best Next-Generation Firewall (NGFW) Solutions in 2026

This guide is for IT leaders, network administrators, and security teams evaluating next-generation firewalls (NGFWs), and it covers how they work, key features, and what to look for in 2026 solutions.  NGFWs have evolved beyond traditional firewalls to deliver deep packet inspection, application awareness, and integrated threat prevention, helping organizations defend against increasingly sophisticated attacks.…

Barracuda: Firewall Exploits Drive 90% of Ransomware Incidents

Ninety percent of ransomware incidents in 2025 reportedly exploited firewalls via unpatched software or a vulnerable account, according to Barracuda Networks’ newly published Barracuda Managed XDR Global Threat Report. Outdated tools and remote access abuse heighten ransomware exposure According to the cybersecurity company, the findings show how attackers exploit legitimate IT tools such as remote…

Why Audio Hacking is the Modern Office’s Biggest Security Gap

Executive Summary The Threat: “Audio Hacking” (or Aural Espionage) bypasses digital firewalls by targeting spoken data in open-plan offices. The Vector: High-sensitivity microphones on laptops and unsecured “breakout zones” leak sensitive C-suite strategy. The Fix: Treating acoustic isolation as a “Physical VPN” using ISO 23351-1 rated office pod as barriers. Best For: CISOs, IT Directors,…

Why Audio Hacking is the Modern Office’s Biggest Security Gap

GUEST OPINION: The Threat: “Audio Hacking” (or Aural Espionage) bypasses digital firewalls by targeting spoken data in open-plan offices. The Vector: High-sensitivity microphones on laptops and unsecured “breakout zones” leak sensitive C-suite strategy. The Fix: Treating acoustic isolation as a “Physical VPN” using ISO 23351-1 rated office pod as barriers. Best For: CISOs, IT Directors,…