February 11th, 2025

A large-scale brute-force attack is using nearly 2.8 million IP addresses daily to target networking devices from Palo Alto Networks, Ivanti, and SonicWall. The attack, which originates mostly from Brazil, Turkey, Russia, Argentina, Morocco, and Mexico, attempts to steal credentials by repeatedly logging into accounts. Once attackers gain access, they can then infiltrate corporate networks. Security experts recommend enabling multi-factor authentication (MFA), using strong passwords, updating VPN software, monitoring for unusual logins, and adopting a zero-trust security approach. Additionally, network equipment should be configured to use modern forms of authentication, and organizations should consider limiting remote access, maintaining patching schedules, and implementing network segmentation. Also, a cyberattack on Lee Enterprises disrupted newspaper operations, shutting down networks and preventing access to files. In a separate development, some ransomware attackers are now attempting to recruit employees to assist in data theft by offering them a cut of the profits, although these offers are generally not trustworthy.