Government agencies share security guidelines for network edge devices

The cybersecurity agencies of the Five Eyes, which includes the United Kingdom, Australia, Canada, New Zealand and the United States, have issued security guidelines to manufacturers of devices and advanced network equipment. The security guidelines focus on improving forensic visibility, aiming to enhance the ability of cybersecurity expertsto detect attacks and investigate breaches more effectively.

See also: New Apple CPU side-channel attacks steal data

Devices such as firewalls, routers, virtual private network (VPN) gateways, web servers, as well as operating technology (OT) systems and Internet of Things (IoT) devices, are prime targets for cyberattacks. Both state-sponsored hackers and financially motivated attackers are turning their attention to them, making them a critical security concern.

Edge devices, which are the target of the security advisory, are a frequent target of attacks because they do not support endpoint detection and response (EDR) solutions. This weakness allows cybercriminals to gain initial access to internal corporate networks, putting an organization’s security at risk.

Many of these devices often lack regular firmware updates and strong authentication mechanisms, are vulnerable to security vulnerabilities, and come with insecure default settings. Additionally, their limited logging capabilities significantly reduce the ability of security teams to detect and respond to breaches.

See also: Russian Star Blizzard hackers target WhatsApp accounts

Furthermore, as they are located at the network edge and handle almost all corporate traffic, they are attractive targets for malicious actions. If left unsecured, they facilitate traffic monitoring and credential harvesting, paving the way for further network access.

Cybersecurity agencies also advised network defenders to consider these suggested minimum requirements for forensic visibility before selecting physical and virtual network devices for their organizations.

In recent years, attackers have continued to target cutting-edge networking devices from various manufacturers, including Fortinet, Palo Alto, Ivanti, SonicWall, TP-Link , and Cisco.

See also: US Cyber ​​Trust Mark: New security label for smart devices

Cybersecurity agencies play a critical role in protecting sensitive information and securing digital infrastructure. These organizations work tirelessly to detect, prevent, and respond to threats that could jeopardize national security, businesses, or individuals. By developing advanced technologies, issuing security guidelines, and implementing strong protocols, they help create a safer online environment. Their work is vital in an increasingly digital world, where the exploitation of cyber vulnerabilities continues to increase.

Source: bleepingcomputer