A critical authentication bypass vulnerability, CVE-2024-53704, in SonicWall firewalls is being actively exploited. Following the release of proof-of-concept code, attackers can remotely hijack VPN sessions by sending crafted cookies, bypassing MFA and exposing internal resources. Organizations are urged to patch their devices immediately, as over 4,500 unpatched servers remain vulnerable, risking potential ransomware attacks and network compromise.

M&S issues update as crippling nationwide IT outage still ongoing – The Sun
Marks & Spencer (M&S) halted online orders in the UK and Ireland following a cyber attack, leading to a 5% drop in share price. Physical