Zero-Day Flaw Allowed Attackers to Achieve RCE on Firewalls

British security firm Sophos determined that malicious actors had abused a zero-day vulnerability to achieve remote code execution (RCE) on some of its firewall products. According to Sophos, the attack chain began when digital attackers exploited a zero-day SQL injection vulnerability to achieve RCE on some firewall products. They abused this privilege to insert a […]… Read More

The post Zero-Day Flaw Allowed Attackers to Achieve RCE on Firewalls appeared first on The State of Security.

from The State of Security https://ift.tt/3bH5jOF
via https://ifttt.com/ IFTTT