SonicWall DPI-SSL: Encryption Has Met Its Match

Encryption is a fundamental building block in the secure operation of the internet. It protects the confidentiality and integrity of information transmitted over the network, preventing unauthorized third parties from accessing sensitive data. The need […]

Microsoft Security Bulletin Coverage for April 2024

Overview Microsoft’s April 2024 Patch Tuesday has 147 vulnerabilities, 68 of which are Remote Code Execution (RCE) vulnerabilities. The SonicWall Capture Labs threat research team has analyzed and addressed Microsoft’s security advisories for April 2024 […]

Patch Tuesday: Which Vulnerabilities Really Need Prioritizing?

By the end of 2023, Microsoft’s cybersecurity team had addressed a formidable 911 vulnerabilities, including 21 zero days. Propelled by sheer will and endless coffee, the team resolved 131 vulnerabilities in July alone—an average of […]

Cryptominer Poses as Fake Java Utility

Overview The SonicWall Capture Labs threat research team analyzed a malware purporting to be a Java utility. It arrives as an installer for Java Access Bridge, but ultimately installs the popular open-source cryptominer, XMRig. Infection […]

Multiple Remote Code Execution Vulnerabilities in JumpServer

Overview The SonicWall Capture Labs threat research team became aware of a couple of remote code execution vulnerabilities in JumpServer, assessed their impact and developed mitigation measures. JumpServer is an open-source bastion host and a […]

This post is also available in: Portuguese (Brazil) French German Japanese Korean Spanish Chinese (Simplified)