SonicWall says attackers are chaining two zero-day vulnerabilities to compromise SMA Series 1000 appliances. The chain combines a pre-authentication SSRF flaw with a post-authentication command-injection flaw. The vendor has issued hotfixes and advises customers to reimage affected appliances and rotate credentials.
SonicWall expands its managed service provider (MSP) portfolio with SonicWall Endpoint Security, a simplified endpoint protection offering. The Milpitas, California-based cybersecurity vendor announces the offering under its own brand and positions it as an addition to the products available through its MSP portfolio.
SonicWall confirms active exploitation of two security vulnerabilities in its SMA1000 secure remote access appliances and urges customers to apply hotfixes. The flaws are exploited in zero-day attacks. The company also publishes indicators of compromise associated with the attacks.
