Security · High impactFan score 22 · Tier C

SonicWall warns of unpatched flaws in end-of-life GMS software

BleepingComputer · By Sergiu Gatlan · 2d ago

SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems that will not be patched. [...]

Read the full story at bleepingcomputer.com ↗

The Brief

SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems.
SonicWall says the flaws will not be patched because the GMS software has reached end of life.

Why it matters

Organizations still running end-of-life SonicWall GMS have no vendor fix for these flaws, so they remain exposed unless they take other steps.

Who’s affected

Organizations running end-of-life SonicWall GMS

#sonicwall
#vulnerability
#end-of-life
#security
#unpatched

Timeline

Nov 4
SonicWall warns customers of two unpatched flaws in end-of-life GMS software
Nov 4 · 2:42 PM
BleepingComputer
SonicWall warns of unpatched flaws in end-of-life GMS software

How do you feel about this?

0 Comments

More in Security

Security · High impact

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4…

The Hacker News · info@thehackernews.com (The Hacker News) · 2d ago · 2 sources · 💬 78

Security · High impact

Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. [...]

BleepingComputer · Lawrence Abrams · 2d ago · 3 sources

Security · High impact

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker…

The Hacker News · info@thehackernews.com (The Hacker News) · 2d ago · 3 sources

Security · High impact

More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus

Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data breaches traced back to Amadeus IT Group — a company that builds and maintains platforms for flight reservation, ticketing…

The Record from Recorded Future News · 2d ago · 2 sources