Threatpost

Hackers Mount Zero-Day Attacks on Sophos Firewalls

A pre-auth SQL injection bug leading to remote code execution is at the heart of a data-stealing campaign against XG firewalls, using the Asnarok trojan. Attackers have been targeting the Sophos XG ...
techtarget

Zero-day flaw in Sophos XG Firewall exploited in attacks

Sophos issued an emergency patch Saturday to fix a zero-day vulnerability that was exploited in the wild. Threat actors had abused a previously-unknown SQL injection vulnerability in the Sophos XG ...
Bleeping Computer

Hackers tried to use Sophos Firewall zero-day to deploy Ransomware

Hackers tried to exploit a zero-day in the Sophos XG firewall to distribute ransomware to Windows machines but were blocked by a hotfix issued by Sophos. At the end of April, hackers utilized a ...
ZDNet

Hackers tried (and failed) to install ransomware using a zero-day in Sophos firewalls

I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen Best laptop cooling pads Best flip ...
BleepingComputer

Asnarök malware exploits firewall zero-day to steal credentials

Some Sophos firewall products were attacked with a new Trojan malware, dubbed Asnarök by researchers cyber-security firm Sophos, to steal usernames and hashed passwords starting with April 22 ...
Dark Reading

Attackers Target Sophos Firewalls with Zero-Day

Security firm Sophos acknowledged "a coordinated attack by an unknown adversary" that compromised the company's XG firewall products using a previously unknown SQL injection vulnerability, according ...
hothardware.com

Sophos XG Firewalls Are Under SQL Injection Zero-Day Attack, Ensure You're Getting The Hotfix

Sophos has published an emergency security update to patch a zero-day vulnerability in its XG enterprise firewall product. The patch plugs a hole that was being abused in the wild by hackers. Sophos ...