Chinese Hacker Pwns 81K Sophos Devices With Zero-Day Bug

The US unsealed charges against Guan Tianfeng (aka gbigmao/gxiaomao), alleging he developed and deployed a critical zero-day (CVE-2020-12271, CVSS 9.8) and malware to compromise approximately 81,000 Sophos firewall devices in 2020; an arrest warrant was issued, the State Department offers up to $10M for information, and DOJ highlighted links to China-based enabling companies.