Topic
Network & Infrastructure
Firewalls, VPNs, intrusion detection and zero trust — the network edge where most intrusions begin.
59 articles in this topic
F5 BIG-IP APM CVE-2025-53521: Unauthenticated RCE Puts 14,000+ Exposed Instances at Risk — What Saudi Banks Must Do Now
A critical F5 BIG-IP APM flaw reclassified from DoS to unauthenticated RCE is being actively exploited — with 14,000+ instances still exposed globally. Here is what Saudi financial institutions must patch immediately.
VulnerabilitiesstrongSwan CVE-2026-25075: 15-Year-Old VPN Flaw That Can Bring Down Your Financial Network
A critical integer underflow in strongSwan's EAP-TTLS plugin — present for 15 years — lets unauthenticated attackers crash VPN gateways. Here is what Saudi financial institutions need to know and do right now.
VulnerabilitiesCisco IMC CVE-2026-20093: Critical 9.8 Auth Bypass Threatens Data Center Infrastructure
Cisco discloses CVE-2026-20093, a CVSS 9.8 authentication bypass in IMC affecting UCS servers. Saudi financial institutions must patch immediately — one HTTP request can hijack admin access to your data center hardware.
VulnerabilitiesCVE-2026-25075: 15-Year strongSwan VPN Flaw Threatens Saudi Financial Remote Access
A critical integer underflow in strongSwan's EAP-TTLS plugin lets unauthenticated attackers crash VPN gateways. With 15 years of affected versions, Saudi financial institutions must patch immediately to protect remote access infrastructure.
VulnerabilitiesCVE-2026-32746: 32-Year-Old Telnetd Bug Gives Attackers Root Access — Why Saudi Financial Infrastructure Must Act Now
A 32-year-old buffer overflow in GNU telnetd now carries a CVSS 9.8 score and threatens every ICS, OT, and legacy network device still running Telnet on port 23 — including infrastructure inside Saudi financial institutions.
VulnerabilitiesCisco SD-WAN Zero-Day CVE-2026-20127: CVSS 10 Flaw Exploited Since 2023 Threatens Saudi Network Infrastructure
A CVSS 10.0 zero-day in Cisco Catalyst SD-WAN has been exploited since 2023 by threat actor UAT-8616. CISA mandated emergency patching. Here's what Saudi financial institutions need to do now.
Network & InfrastructureCitrix NetScaler CVE-2026-3055: CISA KEV-Listed Memory Leak Hitting Financial Gateways
CISA added CVE-2026-3055 to its Known Exploited Vulnerabilities catalog on March 30. Attackers are already harvesting credentials from unpatched NetScaler gateways — here's what Saudi financial CISOs must do before the April 2 deadline.
VulnerabilitiesInterlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131: Urgent Action for Financial Institutions
Interlock ransomware exploited a CVSS 10.0 Cisco Firewall Management Center zero-day for over a month before disclosure. Here's what Saudi financial institutions must do immediately.
VulnerabilitiesCisco SD-WAN Zero-Day CVE-2026-20127: A CVSS 10.0 Threat Hiding Since 2023
A maximum-severity authentication bypass in Cisco Catalyst SD-WAN has been silently exploited by threat actor UAT-8616 since 2023. With CISA mandating emergency remediation, Saudi financial institutions running SD-WAN must act immediately.
Network & InfrastructureLesson 6: Network Security — Firewalls and Intrusion Detection Systems
Cybersecurity Fundamentals – Lesson 6 of 10. Master firewalls, IDS/IPS, and network segmentation to defend your organization's perimeter and internal traffic.
Network & InfrastructureCitrix NetScaler Under Active Attack: What Saudi Financial Institutions Must Do Now
Critical Citrix NetScaler vulnerability CVE-2026-3055 is under active exploitation. Response guide for Saudi financial institutions subject to SAMA CSCC compliance.
From reading to doing
Could your systems be exposed to a similar flaw?
A vulnerability assessment finds the weaknesses in your systems before attackers do, and ranks the fixes by risk.
Vulnerability Assessment
Systematic comprehensive scanning of your infrastructure vulnerabilities with a prioritized remediation report for immediate actio...
Internal Penetration Testing
Realistic internal attack simulation to measure your internal network resilience against insider threats
Web Application Penetration Testing
Deep security assessment of web applications following OWASP Top 10 to protect your data and customers