Sophos has released a security advisory addressing five vulnerabilities in Sophos Firewall, two of which are critical and could enable remote attackers to take control of affected devices in specific situations. The company confirms that fixes have been automatically deployed through hotfixes, assuming the auto-installation setting is default.

‘SMS of Death’ Zero-Click Flaw Disrupting Android Phones With a Single Text
By infosecbulletin
/ Thursday , October 29 2026
A security expert shared information about a zero-click Android bug known as “SMS of Death.” Just one bad text message...
Read More
NIST Unveiled Guidance for Post-Quantum Cryptography Transition
By infosecbulletin
/ Thursday , October 29 2026
The National Institute of Standards and Technology (NIST) has shared advice on switching to post-quantum cryptography. This helps federal agencies...
Read More
Daily Cyber security update for 29.10. 2026
By infosecbulletin
/ Thursday , October 29 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Rapid7 Unveils 17 Zimbra Collaboration Suite Flaws Breaking Identity Boundaries
By infosecbulletin
/ Wednesday , October 28 2026
Rapid7 researchers found 17 security flaws in Zimbra Collaboration Suite (ZCS) that mess up authentication, mailbox isolation, and host privileges....
Read More
CISA launched two free tools Identify Security Misconfig in Microsoft 365 and Google Workspace
By infosecbulletin
/ Wednesday , October 28 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) provides two free tools to help organizations spot security flaws in Microsoft...
Read More
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE
By infosecbulletin
/ Tuesday , October 27 2026
Apple launched iOS 27.2 and iPadOS 27.2 on October 26, 2026, fixing 163 security flaws. The update is for iPhone...
Read More
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
By infosecbulletin
/ Tuesday , October 27 2026
CISA has updated a new alert to reflect the addition of CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV)...
Read More
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
By infosecbulletin
/ Monday , October 26 2026
Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release...
Read More
Daily Cyber security update for 26.10. 2026
By infosecbulletin
/ Monday , October 26 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
By infosecbulletin
/ Monday , October 26 2026
AI startup Cathedral gained a limited access to internal systems at Anthropic in less than 12 hours, exposing employee information,...
Read More
Remediation and Recommendations
Sophos released hotfixes for supported versions, advising upgrades to at least version 21.0 MR1. Customers on older versions must upgrade manually to get the patches. There have been no active exploits of these vulnerabilities yet.
InfoSecBulletin Cybersecurity for mankind
