SonicWall: bypass MFA w SSL-VPN aktywnie wykorzystywany

CISA potwierdza ataki na lukę w SonicWall, WordPress i Snort. Do tego backdoory w fałszywych narzędziach na GitHubie i błąd SSH w Alpine.

Źródła:

• SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
• CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
• Snort, the Network Guardian, Falls to a ZIP Archive | DeafNews
• Fake security tools on GitHub push backdoors and infostealers
• Alpine Linux SSH Flaw Lets Attackers Log In Without a Password
• ThisBash Escape: Claude Dispatch Flaw Enables Browser Extensions RCE on the OS · Forever Security
• macOS 27.3 Is Fixing a Mac Security Problem That Could Have Let Hackers Pretend to Be Websites You Trust With Your Personal Information
• How North Korea turns child prodigies into crypto thieves
• GhostMap Android flaw lets malicious app trigger persistent boot loop
• Firecracker VM Escape: PwnEscape Part 2. | PWN.AI Security Research
• CPython 0-Day Vulnerabilities Threaten the AI Supply Chain | RunSybil Blog
• acidvegas x blog - the port that does not exist

📰 Przeczytaj całe wydanie na stronie

🤖 Odcinek opracowany przy pomocy sztucznej inteligencji. Lektor syntetyczny.