Making Tech Headlines · Page 2

SonicWall's Firewall Needs Protection From Its Own Login

SonicWall has released updates for seven SonicOS firewall vulnerabilities, including an SSL-VPN authentication bypass that is being exploited in attacks. The flaw affects a system used to provide remote access, putting the security appliance itself at the center of the problem. A VPN gateway is supposed to help an organization control who reaches its network from outside. An authentication bypass undermines that job by providing a way around the expected sign-in checks. The company's warning makes the updates important for administrators responsible for affected devices. There is an expensive irony in having to secure the security layer. Firewalls earn their place in the budget by promising to stand between a network and unwanted visitors. Here, the employee at the front desk needs an urgent repair before anyone can count on the guest list. The incident also shows why security work does not end when a device is installed. Appliances run software, and software needs updates even when it sits in a cabinet with a reassuring label. For network teams, the glamorous promise of a hardened perimeter gives way to the familiar work of checking versions and applying fixes. The firewall may still be on duty, but its own shift supervisor has sent it back for training.

Read this story in the full newspaper →

Satire. Not factual reporting. Read the original reporting from the linked publishers.