Network Box Security Response

Name: Network Box Security Response
Address: 16/F Metro Loft, 38 Kwai Hei Street, Kwai Chung, Kowloon, HK
Telephone: +85227362083

Home
Hong Kong
Kowloon
Network Box Security Response

Network Box Headquarters

Internet threats to Network security are a global phenomenon which is why Network Box has established operation centres around the world. With headquarters in Hong Kong and regional operations centres in Europe, Australasia, America and Asia we ‘follow the sun’ twenty four hours a day, seven days a week to ensure our products are kept up to date against the very latest internet security threats.

14/11/2026

Uber Says Personal Data Was Exposed in Third-Party Data Breach. The transportation company says an unauthorized third party had compromised a service provider’s internal credentials and used them to access Uber’s account. Uber Technologies is notifying users that their personal information was exposed in a breach involving one of the company’s service providers.

LINK:

The transportation company said an unauthorized third party had compromised a service provider’s internal credentials and used them to access Uber’s account, according to a notice on the California attorney general’s website dated Tuesday.

12/11/2026

Another day, another firewall vulnerability.

This time, it's Palo Alto Networks.

Palo Alto has disclosed a PAN-OS vulnerability affecting Panorama that could allow authenticated administrators to execute arbitrary code with root privileges. While there is currently no evidence of active exploitation, it serves as another reminder that the systems protecting our networks are often among the most attractive targets. If you're running an affected version, patch promptly and review your management interface exposure.

LINK:

Palo Alto Networks disclosed CVE-2026-0330, a PAN-OS flaw allowing authenticated Panorama administrators to execute arbitrary code as root.

12/11/2026

Another day, another critical Fortinet vulnerability.

At what point does this stop being a series of isolated incidents, and start being recognised as a pattern?

Fortinet has just disclosed multiple critical vulnerabilities affecting FortiManager, FortiAnalyzer and FortiOS, including flaws that could enable remote code ex*****on without authentication.

Several carry CVSS scores of 9.0+, with one rated 9.8, allowing attackers to potentially execute code through exposed management services before any login takes place.

LINK:

Fortinet has disclosed critical security flaws affecting FortiManager, FortiAnalyzer, and FortiOS, including weaknesses that could let attackers execute code without logging in.

01/11/2026

The personal data of nearly 17,000 students based in mainland China who applied to take two international exams through the Hong Kong Examinations and Assessment Authority (HKEAA) has been leaked after its information system was compromised. The authority said the leaked data included the names, dates of birth and email addresses of about 16,900 students. It added that there was no evidence that the Diploma of Secondary Education (DSE) Examination or any other tests had been affected. Separately, the privacy watchdog also reported its findings on Friday on a data leak involving 55,761 patients and 482 current or former staff of the Hospital Authority’s Kowloon East cluster, after a perioperative nursing information system at United Christian Hospital was breached.

LINK: https://www.scmp.com/news/hong-kong/society/article/3372817/nearly-17000-students-hit-data-leak-hong-kong-exams-authority

Authority apologises after system breach exposes birth dates and email addresses of mainland Chinese-based students.

30/10/2026

Binance, the world’s largest crypto exchange by volume, was exploited for more than $6 billion on Thursday in what would be the largest ever crypto attack.

The firm estimated the total impact of the hack at around $6.3 billion in stolen assets. Some $3 billion of assets were frozen, Binance said in a late Thursday update, including $2.3 billion in USDT and USDC stablecoins altogether. That means the token issuers have blocked transfers from the affected blockchain addresses, preventing the attacker from moving or cashing out those funds.

According to the statement, the main reason for the hack might have been due to a compromised engineer’s laptop.

LINK:

Crypto prices are sliding on the news, with bitcoin falling back to $77,000.

22/10/2026

Hackers Target FortiGate, FortiWeb and Palo Alto GlobalProtect, Exposing 70,000+ Credentials. Hackers are targeting internet-facing Fortinet FortiGate firewalls, FortiWeb appliances, and Palo Alto Networks GlobalProtect systems to steal passwords and maintain access to corporate networks. A joint investigation NyxLab linked the campaign to an operator known as k0t.

LINK:

Hackers are targeting internet-facing Fortinet FortiGate firewalls, FortiWeb appliances, and Palo Alto Networks GlobalProtect systems to

16/10/2026

Fortinet's newly disclosed CVE-2025-61624 is a reminder that the most dangerous cyberattacks are often the hardest to see. After gaining privileged access, attackers used the vulnerability to deploy PEERSTITCH, a sophisticated malware implant that embeds itself within trusted FortiOS processes and selectively bypasses VPN security checks. Unlike traditional malware, it leaves the firewall appearing fully operational while quietly undermining the controls designed to protect the network. The result is a troubling scenario where organisations may believe they are secure, even as attackers evade detection and maintain persistent access. This incident reinforces a critical reality: when trust in security infrastructure is compromised, the firewall can become part of the attack surface rather than the defence.

LINK:

PEERSTITCH alters trusted FortiOS processes to bypass checks on selected VPN sessions. Its deployment exposes the real risks of compromised firewall management.

13/10/2026

That cybercriminals exfiltrate data from companies is currently an everyday phenomenon. The criminal online gang The Gentlemen now shows entries for Confluent, Deloitte, KFC, and MoneyGram on its darknet leak site. The perpetrators do not provide information on the type and scope of the data. The countdown for the Deloitte entry has already counted down 40 hours longer than for the other entries. The entry from the cyberattack on FTAPI, which became known at the end of September, looked similar. Meanwhile, the countdown has given way to a button that displays the data.

LINK:

A cyber gang claims to have copied data from Confluent, Deloitte, KFC and MoneyGram. It has published data from Air Canada and FTAPI.

10/10/2026

Two of the most widely deployed names in enterprise networking spent the first two weeks of October 2026 issuing emergency patches for the same class of bug. Cisco pushed a fix for a critical authentication-bypass flaw in Catalyst SD-WAN Manager that the company confirmed was already under active attack. Days later, SonicWall shipped hotfixes for a maximum-severity server-side request forgery flaw in its SMA 1000 remote-access appliances — the second CVSS 10.0 bug to hit that same product line in barely five weeks. Both landed on the U.S. Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities catalog, forcing federal agencies and, by extension, the enterprises that depend on the same gear, into a compressed scramble to patch before attackers get there first.

LINK:

Cisco CVE-2026-76504 and SonicWall CVE-2026-102255 hit CISA KEV within weeks, both scoring near-max CVSS as a second SMA 1000 flaw emerges.

26/09/2026

AI agents attempted to get information from "governments, universities, public agencies, and other institutions", including the SEC, Census Bureau and Education Department, the company said. The disclosures come just days after Australian Prime Minister Anthony Albanese announced that OpenAI agents had breached non-public files on the website of its government-run health care scheme, Medicare. Since August, public fears have grown around the potentially serious, even life-threatening, impacts of AI tools falling outside of human control.

LINK:

OpenAI said its bots accessed public data from the US Census and the Securities and Exchange Commission, which regulates US stock markets.

Address

16/F Metro Loft, 38 Kwai Hei Street, Kwai Chung
Kowloon

Telephone

+85227362083

Website

http://response.network-box.com/

Alerts

Be the first to know and let us send you an email when Network Box Security Response posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.