February 23, 2022 – The CSIA, National Security Agency, and FBI released a Joint Cyber Security Announcement today indicating that Cyclops Blink has been deployed to WatchGuard protected devices. This particularly insidious malware is thought to emanate from Sandworm, also known as Voodoo Bear, and said to originate from the Russian Main Center for Special Technologies.
A common question that we have been receiving from clients and students alike is the difference between a cloud-managed Firebox, and a locally-managed Firebox with WatchGuard Cloud enabled. Ultimately, these two Firebox types are completely different; their only similarity is that they can both access report & log data through WatchGuard Cloud.
One of the many subscription services that WatchGuard offers is Reputation Enabled Defense (RED). This subscription service ‘scores’ websites based on reports from devices all over the Earth. The score system for RED ranks from 1-100, with 100 being the worst URL, and 1 being a clean URL. WatchGuard houses a backend server that receives reports and sends reputation scores to Fireboxes that submit requests.
Charlotte, NC - HQ • Columbia, SC • Raleigh, NC • Kansas City, MO
