DriftingCloud exploits zero-day in Sophos firewall

Threat Level

Attack Report

For a detailed advisory, download the pdf file here

Summary

The Chinese APT actor DriftingCloud exploits the RCE vulnerability in Sophos firewall to take over the entire network