Tag Archive for: VPN

The ‘Riskiest’ iPhone Apps Security Experts Say You Should Delete To Protect Your Personal Data Include Antivirus & Unknown VPN Apps


woman-holding-iphone

woman-holding-iphone

You can download some apps, keep them on your phone for a lifetime, and they’ll only ever offer you joy and never cause you trouble. Unfortunately, that’s not the case with all apps. Being mindful and careful about the apps that you download is one wise way to protect your data and privacy against hacking attempts and other issues. But it’s also a good idea to periodically go through the apps you have downloaded and decide which should stay and which you can afford to part with. Doing this can help you manage your storage better and may even help your battery power. Tech Expert Sufyan Mughal from Gaming Tech Review considers these the “riskiest” iPhone apps that you should delete to protect your personal data. 

App: Unverified Third-Party App Stores

Risk: Unverified third-party app stores pose a significant security risk as they often distribute modified or pirated versions of legitimate apps, Mughal says. “These apps may contain malware, spyware, or malicious code that can compromise your iPhone’s security,” he continues. “To make it less risky, it is strongly advised to uninstall unverified third-party app stores and rely solely on the official App Store for downloading apps. Apple’s strict app review process ensures that apps available on the App Store are thoroughly vetted for security and privacy concerns.”

App: Outdated and Abandoned Apps

Risk: Outdated and abandoned apps that are no longer supported by their developers are potential security vulnerabilities.

 

“These apps may contain unpatched security flaws, making them an attractive target for attackers looking to exploit known vulnerabilities,” Mughal says. “To mitigate this risk, regularly review the apps installed on your iPhone. If you come across outdated or unsupported apps, consider deleting them. Developers typically release updates to address security issues, so it’s crucial to keep your apps up to date by installing updates from the App Store.”

 

App: Suspicious or Unknown VPN Apps

Risk: Suspicious or unknown VPN (Virtual Private Network) apps can compromise your privacy and security. “Some VPN apps may harvest your personal data, inject ads, or…

Source…

Fortinet Patches Critical FortiGate SSL VPN Vulnerability


Fortinet has patched a critical FortiGate vulnerability that can be exploited by an unauthenticated attacker for remote code execution, according to the researchers who reported the flaw to the vendor. 

The vulnerability is tracked as CVE-2023-27997 and it was discovered by researchers at French offensive IT security firm Lexfo. 

Charles Fol, one of the researchers, said on Twitter that the vulnerability affects every SSL VPN appliance and it can be exploited for remote code execution without authentication. 

Fortinet has yet to publish an advisory for the flaw, but French cybersecurity company Olympe Cyberdefense reported that an advisory is expected to become public on June 13. 

The company said the security hole impacts the SSL VPN functionality of FortiGate firewalls, allowing an attacker to “interfere via the VPN”. 

FortiOS 7.0.12, 7.2.5, 6.4.13 and 6.2.15 reportedly contain the patch. 

Vulnerabilities affecting Fortinet products are often exploited by threat actors — both cyberspies and profit-driven cybercriminals — in many cases before a patch has been released.

Advertisement. Scroll to continue reading.

CISA’s Known Exploited Vulnerabilities Catalog currently lists 10 Fortinet product vulnerabilities that have been leveraged by malicious actors in their attacks since 2018.

Related: Fortinet Patches Critical Vulnerability in Data Analytics Solution

Related: Chinese Hackers Exploited Fortinet VPN Vulnerability as Zero-Day

Related: Fortinet Finds Zero-Day Exploit in Government Attacks After Devices Detect Integrity Breach

Related: Fortinet Patches Critical Unauthenticated RCE Vulnerability in FortiOS

Source…

NordLayer’s new browser extension offers all its top VPN tools in one place


NordLayer – one of our picks for the best business VPN – has launched a new browser extension that incorporates the features found in the desktop version of the network access security solution.

Formerly known as NordVPN Teams, NordLayer is part of the NordSec group, which includes among its products one of the best VPNs, NordVPN, and the best password manager for security, NordPass. NordLayer is B2B focused, providing a cybersecurity service that is scalable.

Source…

Back by popular request: Internet Security prepping that everyone needs to know.