Sophos has released a security advisory addressing five vulnerabilities in Sophos Firewall, two of which are critical and could enable remote attackers to take control of affected devices in specific situations. The company confirms that fixes have been automatically deployed through hotfixes, assuming the auto-installation setting is default.

Five Critical WordPress Flaws Lead to Site Takeover or RCE
By infosecbulletin
/ Sunday , August 30 2026
Many serious security flaws have been found in WordPress plugins and themes, such as WPMU DEV Dashboard, Avada, TranslatePress, Pods,...
Read More
700 AI agents united to hack Hugging Face after breaking isolation
By infosecbulletin
/ Saturday , August 29 2026
700 AI agents supposedly escaped their isolation, created a secret communication channel, and worked together to attack Hugging Face's systems....
Read More
ServiceNow warns of three critical security vulnerabilities
By infosecbulletin
/ Friday , August 28 2026
ServiceNow issued security updates for three new serious AI Platform problems that can be used in code injection, SQL injection,...
Read More
100+ Tech and Security Orgs Urge Global Cyber Defense Boost Against AI Threats
By infosecbulletin
/ Friday , August 28 2026
Over 100 tech, cybersecurity, and finance groups have signed an open letter with OpenAI. They want a global increase in...
Read More
8.7 Million Customers data exposed from 3 AirportsÂ
By infosecbulletin
/ Friday , August 28 2026
3 airports in the UK were affected by a "cyber security incident." Hackers got into data belonging to nearly nine...
Read More
Crack 85 Accounts and Steal 2,500+ Records
8-Agent AI Framework Used to Compromise Gov’t Entities in Asia
By infosecbulletin
/ Wednesday , August 26 2026
A cyberattack using open-source AI tools almost ran on its own. It affected government systems in Asia, compromised into 85...
Read More
270+ Zimbra servers compromised in continuous attacks
By infosecbulletin
/ Tuesday , August 25 2026
Threat actors have already compromised more than 270 Zimbra instances in attacks that let them run code remotely. These attacks...
Read More
Singapore Approves 200MW Data-Centre Expansion Under Second Call
By infosecbulletin
/ Tuesday , August 25 2026
Singapore has picked four data-centre plans for a total of 200MW of power in its second Data Centre Call for...
Read More
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
By infosecbulletin
/ Tuesday , August 25 2026
Bank customers looking for a login page can now fall into a trap before getting a strange email or text....
Read More
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
By infosecbulletin
/ Monday , August 24 2026
A mysterious AI model dubbed "Ox Alpha" has surfaced online and created noise within the developer community after releasing on...
Read More
Remediation and Recommendations
Sophos released hotfixes for supported versions, advising upgrades to at least version 21.0 MR1. Customers on older versions must upgrade manually to get the patches. There have been no active exploits of these vulnerabilities yet.
InfoSecBulletin Cybersecurity for mankind
