Problem:An authentication bypass vulnerability allowing remote code execution was discovered in the User Portal and Webadmin of Sophos Firewall. It was reported via the Sophos bug bounty program by an external securityRead More…
Log4Shell, also known by its Common Vulnerabilities and Exposures number CVE-2021-44228, is a zero-day arbitrary code execution vulnerability in the popular Java logging framework Log4j. It’s been described as a ‘design failureRead More…
In September 2020, Sophos resolved and released a fix for a remote code execution vulnerability in the WebAdmin of SG UTM and promptly informed the SG Community to upgrade to the latestRead More…
In March 2019, Microsoft released an update to Windows 7 and Windows 2008 R2 to support SHA256 only driver signing. This Microsoft update is required in order to run Sophos Endpoint. AsRead More…