Critical Remote Code Execution Vulnerability in Sophos Firewall

critical-remote-code-execution-vulnerability-in-sophos-firewall

Sophos on Friday announced the rollout of urgent patches for a critical authentication bypass vulnerability in the web portal of its Sophos Firewall product.

Reported by an external researcher via the Sophos bug bounty program, the vulnerability is tracked as CVE-2022-1040 and impacts Sophos Firewall v18.5 MR3 (18.5.3) and older releases.

read more

VMware Patches Critical Vulnerabilities in Carbon Black App Control

vmware-patches-critical-vulnerabilities-in-carbon-black-app-control

VMware this week announced software updates that address two critical-severity vulnerabilities in its Carbon Black App Control product.

An application allow listing solution, Carbon Black App Control allows security teams to secure enterprise systems by locking them down to prevent unwanted changes, and to maintain continuous compliance.

read more