Security News

Sophos discloses critical Firewall remote code execution flaw
2024-12-20 15:31

Sophos has addressed three vulnerabilities in its Sophos Firewall product that could allow remote unauthenticated threat actors to perform SQL injection, remote code execution, and gain privileged...

Sophos Firewall vulnerable to critical remote code execution flaw
2024-12-20 15:31

Sophos has addressed three vulnerabilities in its Sophos Firewall product that could allow remote unauthenticated threat actors to perform SQL injection, remote code execution, and gain privileged...

Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation
2024-12-20 08:13

Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain...

Over 25,000 SonicWall VPN Firewalls exposed to critical flaws
2024-12-17 15:27

Over 25,000 publicly accessible SonicWall SSLVPN devices are vulnerable to critical severity flaws, with 20,000 using a SonicOS/OSX firmware version that the vendor no longer supports. [...]

U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls
2024-12-11 06:29

The U.S. government on Tuesday unsealed charges against a Chinese national for allegedly breaking into thousands of Sophos firewall devices globally in 2020. Guan Tianfeng (aka gbigmao and...

US names Chinese national it alleges was behind 2020 attack on Sophos firewalls
2024-12-11 05:02

Also sanctions his employer – an outfit called Sichuan Silence linked to Ragnarok ransomware The US Departments of Treasury and Justice have named a Chinese business and one of its employees as...

US sanctions Chinese cybersecurity company for firewall compromise, ransomware attacks
2024-12-10 20:34

The Department of the Treasury is sanctioning Chinese cybersecurity company Sichuan Silence, and one of its employees, Guan Tianfeng, for their roles in the April 2020 compromise of tens of...

US sanctions Chinese firm for hacking firewalls in ransomware attacks
2024-12-10 16:37

The U.S. Treasury Department has sanctioned Chinese cybersecurity company Sichuan Silence and one of its employees for their involvement in a series of Ragnarok ransomware attacks targeting U.S....

SafeLine: Open-source web application firewall (WAF)
2024-12-04 05:30

SafeLine is an open-source and self-hosted Web Application Firewall (WAF) that protects websites from cyber attacks. “SafeLine WAF was created to protect web applications for small and...

Week in review: 0-days exploited in Palo Alto Networks firewalls, two unknown Linux backdoors identified
2024-11-24 09:00

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 2,000 Palo Alto Networks devices compromised in latest attacks Attackers have compromised around...