As cited
Copy frozen at (site build).
ot ics
HKCERT highlights internet-edge device risks as attackers target VPNs, firewalls and remote access systems
Hong Kong's CERT issued a September 15 security advisory warning that internet-edge devices such as virtual private networks (VPNs), firewalls, and remote access systems are increasingly targeted as entry points for network compromise. The guidance emphasizes that patching vulnerabilities alone is insufficient; organizations must also inventory externally accessible devices, manage credentials, and investigate for persistence mechanisms such as backdoors or malicious accounts that attackers may have installed before patches were applied. The advisory cites recent incidents including the FortiBleed credential leak affecting over 70,000 Fortinet devices globally and Japan's compromised Government Solution Service affecting 246,000 records to illustrate the continuing risk.
Why it matters: Enterprise IT and security teams must prioritize inventory, credential hygiene, and post-patch forensics on edge devices; patching alone will not remove attacker persistence or regain control of compromised accounts, creating ongoing exposure to lateral movement, data theft, and ransomware deployment.
- Source published
- First seen by Cybersecurity Tracker