Collaborate Disseminate
By Waqas
If exploited, an unauthenticated, remote attacker can execute code as a “nobody user” in the device meaning attacker would get root access and gain full control of the device.
This is a post from HackRead.com Read the original post: SMA 100 fl… Continue reading SMA 100 flaws in SonicWall VPN expose devices to remote takeover
Stellar Cyber announced that it has joined the SonicWall SecureFirst Partner Program to integrate Stellar Cyber’s advanced threat detection and response with SonicWall’s prevention technology. This combination of prevention, detection and response prov… Continue reading Stellar Cyber partners with SonicWall to deliver threat prevention technology across all environments
In the first half (H1) of 2021, ransomware attacks skyrocketed, eclipsing the entire volume for 2020 in only six months, according to the mid-year update to the SonicWall report. In a new paradigm for cybercrime, SonicWall is analyzing how threat actor… Continue reading Ransomware attacks skyrocketed in H1 2021
In my previous post, I disclosed that SonicWall had quietly released vulnerability fixes over the course of several days before vulnerability advisories were published for CVE-2020-5135. Rather than properly fixing CVE-2020-5135, SonicWall’s fix introd… Continue reading What are Product Security Incident Response Team (PSIRT) Best Practices?
archTIS announced the company is expanding its presence across Europe, Middle East and Africa (EMEA) with the appointment of Pete Smith as the Vice President and General Manager of EMEA, based in London, United Kingdom and the creation of a new UK corp… Continue reading archTIS appoints Pete Smith as VP and GM of EMEA
SonicWall announced three new high-performance firewall models for enterprises and large organizations — NSa 4700, NSa 6700 and NSsp 13700 — designed to accelerate network throughput, stop advanced cyberattacks like ransomware, and securely connect mil… Continue reading SonicWall NSa and NSsp firewall models accelerate network throughput, stop advanced cyberattacks
Building on momentum from the company’s ‘Generation 7’ cybersecurity platform evolution, SonicWall is experiencing record growth across all segments, including enterprise, small- and medium-sized businesses (SMB) and government. This … Continue reading SonicWall experiencing record growth across all segments
Back in September 2020, I configured a SonicWall network security appliance to act as a VPN gateway between physical devices in my home lab and cloud resources on my Azure account. As I usually do with new devices on my network, I did some cursory secu… Continue reading Analyzing SonicWall’s Unsuccessful Fix for CVE-2020-5135
Since the beginning of the year, various cyber attackers leveraged a slew of zero-day vulnerabilities to compromise different SonicWall solutions. Crowdstrike now warns that a cyber-criminal group is exploiting CVE-2019-7481 – an older SQL inject… Continue reading Ransomware attackers are leveraging old SonicWall SRA flaw (CVE-2019-7481)
A hacking group exploited a SonicWall zero-day software flaw before a fix was available in order to deploy a previously unreported ransomware strain, FireEye researchers said Thursday. The disclosure of the ransomware comes one week after FireEye revealed three previously unknown vulnerabilities in SonicWall’s email security software. But the latest hacking tool emerges from an earlier zero-day found in SonicWall’s mobile networking gear. Mandiant, FireEye’s incident response unit, dubbed the malware FiveHands, which bears similarities to another hacking tool, dubbed HelloKitty, that attackers deployed against a video game company. The security firm linked it to a group they call UNC2447. “UNC2447 monetizes intrusions by extorting their victims first with FIVEHANDS ransomware followed by aggressively applying pressure through threats of media attention and offering victim data for sale on hacker forums,” reads a blog post from the company. “UNC2447 has been observed targeting organizations in Europe and North America and has […]
The post Hacking group exploited SonicWall zero-day for ransomware attacks, FireEye says appeared first on CyberScoop.
Continue reading Hacking group exploited SonicWall zero-day for ransomware attacks, FireEye says