Hackers are exploiting a Sophos firewall zero-day

Sophos releases emergency patch to fix SQL injection bug exploited in the wild, impacting its XG Firewall product.

You can read the full article here.