Category Archives: SonicWALL

Hackers exploit SonicWall email software in a banner week for zero-day flaws

Posted on by

It’s only Wednesday, and it’s already been a banner week for previously unknown exploits in popular security software. Unidentified hackers have exploited three “zero-day,” or newly discovered, vulnerabilities in email software made by SonicWall to access an unnamed victim organization’s network, according to Mandiant, the incident response unit of security firm FireEye. “The adversary leveraged these vulnerabilities, with intimate knowledge of the SonicWall application, to install a backdoor, access files and emails, and move laterally into the victim organization’s network,” Mandiant said in a blog on Tuesday evening. Security fixes are available for the flaws, and SonicWall urged customers to apply them. The news came after Mandiant revealed on Tuesday that suspected Chinese hackers had used bugs in another popular enterprise software made by Pulse Secure to break into government and defense-sector networks. Those breaches followed separate intrusion campaigns allegedly carried out by Russian and Chinese hackers exploiting software made […]

The post Hackers exploit SonicWall email software in a banner week for zero-day flaws appeared first on CyberScoop.

Continue reading Hackers exploit SonicWall email software in a banner week for zero-day flaws→

Hackers found leveraging three SonicWall zero-day vulnerabilities

Posted on by

Attackers that seem to have “intimate knowledge” of the SonicWall Email Security product have been discovered leveraging three (at the time) zero-day vulnerabilities in the popular enterprise solution. Exploited in conjunction, the flaws al… Continue reading Hackers found leveraging three SonicWall zero-day vulnerabilities→

SonicWall NSa 3700: Thwarting attacks targeting government agencies and large enterprises

Posted on by

SonicWall announced the expansion of its threat protection offerings with the NSa 3700, a multi-gigabit security appliance designed to thwart attacks targeting government agencies, retail, K-12, higher education and enterprises. The company also introd… Continue reading SonicWall NSa 3700: Thwarting attacks targeting government agencies and large enterprises→

Threat actors thriving on the fear and uncertainty of remote workforces

Posted on by

The pandemic’s work-from-home reality resulted in an unprecedented change for organizations as they fought to defend exponentially greater attack surfaces from cybercriminals armed with powerful cloud-based tools, cloud storage and endless targets. As … Continue reading Threat actors thriving on the fear and uncertainty of remote workforces→

SonicWall issues patch for firmware zero-day used to attack the company and its customers

Posted on by

Network security company SonicWall is offering a patch for a serious bug in one of its product lines that had attracted public warnings from cybersecurity researchers over the past week. The patch fixes a flaw that had put the Silicon Valley firm in the headlines of late. SonicWall on Jan. 22 said attackers had exploited a zero-day vulnerability in its own products to gain access to its corporate network. Then, on Jan. 31, researchers from NCC Group then said the bug was being exploited elsewhere in the wild. The bug is in SonicWall’s line of SMA 100 mobile networking gear, which is designed to add a layer of security for companies that allow employees to use their own devices to access corporate networks. SonicWall said the vulnerability allowed hackers to gain administrator-level privileges and then subsequently use a remote-code execution (RCE) on networks. The patch, posted Wednesday, applies to the […]

The post SonicWall issues patch for firmware zero-day used to attack the company and its customers appeared first on CyberScoop.

Continue reading SonicWall issues patch for firmware zero-day used to attack the company and its customers→

Actively exploited SonicWall zero-day affects SMA 100 series appliances

Posted on by

SonicWall has confirmed that the actively exploited zero-day vulnerability spotted by the NCC Group on Sunday affects its Secure Mobile Access (SMA) 100 series appliances. They firm did not outright state it, but it’s likely the same one “h… Continue reading Actively exploited SonicWall zero-day affects SMA 100 series appliances→

SonicWall hit by attackers leveraging zero-day vulnerabilities in its own products?

Posted on by

On Friday evening, SonicWall announced that it “identified a coordinated attack on its internal systems by highly sophisticated threat actors exploiting probable zero-day vulnerabilities on certain SonicWall secure remote access products.” … Continue reading SonicWall hit by attackers leveraging zero-day vulnerabilities in its own products?→

SonicWall adds high-performance, low-TCO firewalls to its Capture Cloud Platform

Posted on by

SonicWall announced the expansion of its Capture Cloud Platform with the addition of the high-performance NSa 2700 firewall and three new cost-effective TZ firewall options. The company also debuted SonicWall Cloud Edge Secure Access that delivers easy… Continue reading SonicWall adds high-performance, low-TCO firewalls to its Capture Cloud Platform→

Ryuk ransomware behind one third of all ransomware attacks in 2020

Posted on by

There’s a growing use of ransomware, encrypted threats and attacks among cybercriminals leveraging non-standard ports, while overall malware volume declined for the third consecutive quarter, SonicWall reveals. “For most of us, 2020 has bee… Continue reading Ryuk ransomware behind one third of all ransomware attacks in 2020→