Sophos flags concerning firewall security flaws, users told to patch now

Sophos has discovered and patched three critical vulnerabilities in its Firewall product, allowing for remote code execution and privilege escalation. Users are urged to apply the fixes immediately, with workarounds available for those unable to patch. The company advises restricting SSH access, reconfiguring HA with a strong passphrase, and disabling WAN access to bolster security against potential cyberattacks targeting firewalls.

Full Article