China s Volt Typhoon APT Now Exploits Zoho ManageEngine darkreading.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from darkreading.com Daily Mail and Mail on Sunday newspapers.
A recent campaign shows that the politically motivated threat actor has more tricks up its sleeve than previously known, targeting a critical exploit and wiping logs to cover their tracks.
FireEye finds SonicWall zero-days being exploited in the wild Wednesday, 21 April 2021 10:32 FireEye finds SonicWall zero-days being exploited in the wild
Shares Image by neo tam from Pixabay
Three zero-day vulnerabilities in SonicWall s Email Security product that were being exploited in the wild have been reported by American security firm FireEye s Mandiant Managed Defence unit.
The company has released hotfixes for Windows users and and also for hardware and ESXi virtual appliance users.
In
a detailed blog post, researchers Josh Fleischer, Chris DiGiamo and Alex Pennino said the three flaws were run in conjunction to obtain admin access and execute code on a SonicWall ES device.