Critical SonicWall SSLVPN bug exploited in ransomware attacks
Affiliates of ransomware take use of a serious security flaw in SonicWall SonicOS firewall devices to infiltrate targets' networks.
This incorrect access control problem, identified as CVE-2024-40766, impacts firewalls that are Gen 5, Gen 6, and Gen 7. On August 22, SonicWall released a patch, but they cautioned that it only affected the management access interface of the firewalls.
On Friday, however, SonicWall disclosed that assaults were now taking advantage of the security flaw, which also affected the firewall's SSLVPN function. Customer warning: "Apply the patch as soon as possible for affected products"; the company disclosed no information read more about Critical SonicWall SSLVPN bug exploited in ransomware attacks.
Get up to date on the latest cybersecurity news&nb...