SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

BleepingComputer security feed covering active exploitation of a SonicWall SSL-VPN MFA authentication bypass, QNAP/Plex exploitation, zero-day vulnerabilities in D-Link switches, an OpenSSH authentication bypass on musl-based Linux systems, supply-chain malware in fake GitHub security tools, phishing campaigns, exposed secrets, industrial refrigeration targeting, and other cybersecurity incidents. Several stories describe vulnerabilities being exploited in the wild or affecting internet-facing and operational technology systems.