Active exploitation of RDP vulnerabilities have been reported. The RDP vulnerabilities exploited by attacker are BlueKeep (CVE-2019-0708) and DejaBlue (CVE-2019-1222, CVE 2019-1226, CVE-2019-1181 and CVE-2019-1182), both of which patch are already released by Microsoft.
WhiteShadow Downloader Exploits Microsoft SQL To Spread Malware TLP:Amber
A new malware downloader dubbed “WhiteShadow” that abuses Microsoft SQL queries to drop malicious payloads on infected devices has emerged on the cyber threat landscape. White Shadow spreads via malspam attacks that send out emails attached with malicious Microsoft Word and Excel documents or containing a malicious URL.
Share this:
FortiManager- while adding Forti device in FortiManager “A device with Serial Number already exists”
Description:- Recently we have deployed FortiManager in our organization. Here we have a single console of FortiManager and Forti Analyzer. Our Requirement is to add 10 no. of FortiGate Device and must have manage from FortiManager. The Forti device would have us advertised beforehand in Forti Analyzer. Now we have to add a Forti device... Continue Reading →
Share this:
Fortigate System events “The NTP daemon step adjusted time from Thu February time”
Fortigate System events “The NTP daemon step adjusted time from Thu February time”
Share this:
Unsafe reboot may have caused inconsistency in disk drive. HA sync issue due to power reboot. Fortigate 201E
“Unsafe reboot may have caused inconsistency in disk drive. Please run execute disk scan 17” of Fortigate Firewall.
Share this:
The remote VPN user source address does not show in the checkpoint firewall, instead it shows the fortigate of the device LAN interface address.
Solution applied FortiGate 2000E Firmware version : v6.0.2 build0163 (GA) Forti Client Version : 6.0.4 Check Point 5000 Appliance : R80.10 Problem: VPN user (10.50.50.1) have access of server (10.10.10.55) RDP service. For that IPsec VPN tunnel and access, policy created on Fortigate Firewall and applied IPsec tunnel on fortigate policy. User can connect VPN... Continue Reading →
Share this:
This site can’t be reached message displayed instead of web filter blocked message| FortiGate Firewall KB
This site can’t be reached message displayed instead of web filter blocked message| FortiGate Firewall KB
Share this:
Cannot connect to Media Agent on system backup.netsecaddict.com, port 128355 (IPC Cannot Connect System error: [10060] Connection timed out
We are facing same issue in our organization. There is HP data protector backup software version is 09.09 and client server software version is 09.09. Report Messages Other Than Normal [Common]:[Critical] From: BDA-NET@appserver.netsecaddict.com"CONFIGURATION:" Time: 12/11/2018 10:50:42 AM Cannot connect to Media Agent on system backup@netsecaddict.com, port 128355 (IPC Cannot Connect System error: [10060] Connection timed... Continue Reading →
Share this:
Deploying FortiClient from FortiEMS Management server.
Deploying FortiClient software to endpoints from FortiClient EMS management server. Auto install FortiClient to Endpoints
Recent Comments