Bishop Fox found a way to abuse a SonicWall VPN flaw It allows threat actors to bypass authentication and hijack sessions ...

Roses are red, violets are blue, CVE-2024-53704 is sweet for a ransomware crew Miscreants are actively abusing a ...

Bishop Fox says that internet scans as of February 7 show roughly 4,500 internet-exposed SonicWall SSL VPN servers without the security updates fixing CVE-2024-53704.

The flaw, listed as CVE-2024-53704, is an improper authentication vulnerability in the SSL VPN mechanism, which can allow a remote actor to bypass authentication. SonicWall issued an advisory and ...

A massive brute force password attack involving 2.8 million IP addresses targets VPN devices from various companies including Palo Alto Networks, Ivanti, and SonicWall.

Silicon East is looking into providing a limited number of critical employees at affected customers with an IPsec tunnel using SonicWall’s Global VPN Client (GVC) so that they can work remotely ...

The high-severity SSLVPN authentication bypass flaw affecting SonicWall firewalls running vulnerable SonicOS versions is actively being exploited in-the-wild.

Cybersecurity company SonicWall says hackers are exploiting a ... remote access tools, and VPN products. These devices exist on the perimeter of corporate networks to protect against would-be ...

Successful exploitation enables remote attackers to hijack active SSL VPN sessions without authentication, which grants them unauthorized access to targets' networks. SonicWall urged customers to ...