Latest SonicWall news

Over 178K SonicWall firewalls vulnerable to DoS, potential RCE attacks

Security researchers have found over 178,000 SonicWall next-generation firewalls (NGFW) with the management interface exposed online are vulnerable to denial-of-service (DoS) and potential remote code execution (RCE) attacks.
- Sergiu Gatlan
- January 15, 2024
- 01:28 PM
- 0
SonicWall warns admins to patch critical auth bypass bugs immediately

SonicWall warned customers today to urgently patch multiple critical vulnerabilities impacting the company's Global Management System (GMS) firewall management and Analytics network reporting engine software suites.
- Sergiu Gatlan
- July 12, 2023
- 04:08 PM
- 0
SonicWall devices infected by malware that survives firmware upgrades

A suspected Chinese hacking campaign has been targeting unpatched SonicWall Secure Mobile Access (SMA) appliances to install custom malware that establish long-term persistence for cyber espionage campaigns.
- Bill Toulas
- March 09, 2023
- 12:40 PM
- 0
SonicWall warns web content filtering is broken on Windows 11 22H2

Security hardware manufacturer SonicWall warned customers today of what it describes as a "limitation" of the web content filtering (WCF) feature on Windows 11, version 22H2 systems.
- Sergiu Gatlan
- February 08, 2023
- 05:57 PM
- 0
SonicWall: Patch critical SQL injection bug immediately

SonicWall has published a security advisory today to warn of a critical SQL injection flaw impacting the GMS (Global Management System) and Analytics On-Prem products.
- Bill Toulas
- July 22, 2022
- 01:01 PM
- 0
SonicWall ‘strongly urges’ admins to patch SSLVPN SMA1000 bugs

SonicWall "strongly urges" customers to patch several high-risk security flaws impacting its Secure Mobile Access (SMA) 1000 Series line of products that can let attackers bypass authorization and, potentially, compromise unpatched appliances.
- Sergiu Gatlan
- May 13, 2022
- 11:38 AM
- 0
Critical SonicWall firewall patch not released for all devices

Security hardware manufacturer SonicWall has fixed a critical vulnerability in the SonicOS security operating system that allows denial of service (DoS) attacks and could lead to remote code execution (RCE).
- Sergiu Gatlan
- March 28, 2022
- 03:47 PM
- 0
CISA adds 8 vulnerabilities to list of actively exploited bugs

The US Cybersecurity & Infrastructure Security Agency (CISA) has added eight more flaws to its catalog of exploited vulnerabilities that are known to be used in attacks, and they're a mix of old and new.
- Bill Toulas
- January 31, 2022
- 01:18 PM
- 0
Attackers now actively targeting critical SonicWall RCE bug

A critical severity vulnerability impacting SonicWall's Secure Mobile Access (SMA) gateways addressed last month is now targeted in ongoing exploitation attempts.
- Sergiu Gatlan
- January 24, 2022
- 04:48 PM
- 0
SonicWall explains why firewalls were caught in reboot loops

In a weekend update, SonicWall said the widespread reboot loops that impacted next-gen firewalls worldwide were caused by signature updates published on Thursday evening not being correctly processed.
- Sergiu Gatlan
- January 24, 2022
- 10:07 AM
- 0
SonicWall shares temp fix for firewalls stuck in reboot loop

Following a stream of customer reports that started yesterday evening, security hardware manufacturer SonicWall has provided a temporary workaround for reviving next-gen firewalls running SonicOS 7.0 stuck in a reboot loop.
- Sergiu Gatlan
- January 21, 2022
- 06:36 AM
- 2
SonicWall: Y2K22 bug hits Email Security, firewall products

SonicWall has confirmed today that some of its Email Security and firewall products have been hit by the Y2K22 bug, causing message log updates and junk box failures starting with January 1, 2022.
- Sergiu Gatlan
- January 07, 2022
- 04:56 PM
- 0
SonicWall ‘strongly urges’ customers to patch critical SMA 100 bugs

SonicWall 'strongly urges' organizations using SMA 100 series appliances to immediately patch them against multiple security flaws rated with CVSS scores ranging from medium to critical.
- Sergiu Gatlan
- December 08, 2021
- 08:11 AM
- 0
SonicWall fixes critical bug allowing SMA 100 device takeover

SonicWall has patched a critical security flaw impacting several Secure Mobile Access (SMA) 100 series products that can let unauthenticated attackers remotely gain admin access on targeted devices.
- Sergiu Gatlan
- September 24, 2021
- 02:19 AM
- 0
HelloKitty ransomware is targeting vulnerable SonicWall devices

CISA is warning of threat actors targeting "a known, previously patched, vulnerability" found in SonicWall Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) products with end-of-life firmware.
- Sergiu Gatlan
- July 17, 2021
- 11:44 AM
- 0
SonicWall warns of 'critical' ransomware risk to EOL SMA 100 VPN appliances

SonicWall has issued an "urgent security notice" warning customers of ransomware attacks targeting unpatched end-of-life (EoL) Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) products.
- Sergiu Gatlan
- July 14, 2021
- 11:39 AM
- 0
SonicWall urges customers to 'immediately' patch NSM On-Prem bug

SonicWall urges customers to 'immediately' patch a post-authentication vulnerability impacting on-premises versions of the Network Security Manager (NSM) multi-tenant firewall management solution.
- Sergiu Gatlan
- May 28, 2021
- 09:46 AM
- 0
New ransomware group uses SonicWall zero-day to breach networks

A financially motivated threat actor exploited a zero-day bug in SonicWall SMA 100 Series VPN appliances to deploy new ransomware known as FiveHands on the networks of North American and European targets.
- Sergiu Gatlan
- April 29, 2021
- 06:00 PM
- 0
SonicWall warns customers to patch 3 zero-days exploited in the wild

Security hardware manufacturer SonicWall is urging customers to patch a set of three zero-day vulnerabilities affecting both its on-premises and hosted Email Security products.
- Sergiu Gatlan
- April 20, 2021
- 02:23 PM
- 0
New botnet targets network security devices with critical exploits

Authors of a new botnet are targeting connected devices affected by critical-level vulnerabilities, some of them impacting network security devices.
- Ionut Ilascu
- March 16, 2021
- 01:58 PM
- 0