Tag: sonicwall
48 articles
MFA Gaps Leave Organizations Exposed to Credential Attacks
In just seven minutes, a hacker exploited a vulnerable account lacking multi-factor authentication, gaining access to sensitive data and nearly pulling off a devastating ransomware attack. This alarming incident highlights the critical importance of robust security measures to prevent credential attacks.
SonicWall SMA 1000 Flaw Exploited in 135 Attempts Post-Patch
A critical vulnerability in SonicWall's SMA 1000 appliances, known as CVE-2026-102255, has been exploited in 135 attempts since a patch was released, allowing attackers to secretly tap into internal systems and perform unauthorized operations. This highly severe flaw, rated 10.0 on the CVSS scale, enables pre-authenticated server-side request forgery attacks.
SonicWall SMA1000 flaw exploited in targeted attacks
A critical vulnerability, CVE-2026-102255, in SonicWall SMA1000 appliances is being exploited in targeted attacks, putting sensitive internal functionality at risk. This maximum-severity flaw allows remote attackers to manipulate the appliance and perform unauthorized operations.
SonicWall Fixes CVSS 10.0 Flaw in SMA1000 Appliances
SonicWall has patched a critical security flaw in its SMA1000 appliances that could let attackers infiltrate internal systems and run unauthorized operations. The bug, rated 10.0 on the CVSS scale, can be exploited before login, making it a high-risk vulnerability.
SonicWall Disrupts SSRF Flaw in SMA1000 Gateways
Don't let your SonicWall SMA1000 gateways become an open door for hackers - a critical SSRF flaw, CVE-2026-102255, has been discovered, allowing attackers to make internal requests without authorization, and hotfixes are available to patch this vulnerability. Over 400 Internet-exposed appliances are currently at risk, making immediate action crucial.
Attackers Exploit Zero-Days in SonicWall SMA 1000 Appliances
SonicWall's SMA 1000 appliances are under attack, thanks to two newly disclosed zero-day vulnerabilities - CVE-2026-83548 and CVE-2026-83549 - that can be chained together for a complete network compromise. Attackers are already exploiting these flaws in the wild, prompting urgent patching advice from the vendor and cybersecurity authorities.
CISA Warns of Exploited Flaws in AI, Network Devices
The alarm bells are ringing: CISA has identified seven vulnerabilities in AI and network devices that are being actively exploited by hackers, including a critical flaw in SonicWall SMA 1000 Appliances that could give attackers unauthorized access. Stay safe - know your vulnerabilities!
SonicWall SMA1000 boxes targeted in active zero-day attacks
Hackers are actively exploiting two zero-day vulnerabilities in SonicWall's Secure Mobile Access (SMA) Series 1000 appliances, potentially allowing unauthorized access to sensitive functionality and malicious operations. This critical threat has prompted SonicWall to warn users of its SMA1000 boxes to take immediate action.
SonicWall Zero-Days Exploited in Chained Attacks
SonicWall has confirmed that two newly discovered zero-day flaws in its Secure Mobile Access (SMA) 1000 appliances are being actively exploited in chained attacks, posing significant security risks. The vendor has swiftly released fixes for the vulnerabilities, which were identified internally by its researchers.
SonicWall Zero-Days Exploited in Wild, Firm Urges Immediate Patching
SonicWall is urging immediate patching for two zero-day vulnerabilities in its SMA1000 appliances, which are being actively exploited in the wild by hackers. The more critical flaw, CVE-2026-83548, has a severity rating of 10.0 and can be triggered without authentication, putting sensitive data at risk.
Ransomware gangs exploit SonicWall SMA1000 flaws
Ransomware gangs are actively exploiting two recently patched flaws in SonicWall's SMA1000 remote-access gateway, which can let attackers hijack vulnerable servers and send requests on their behalf. The vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, were patched in mid-July, but threat actors are now using them in real-world attacks.
INC Ransomware Exploits SonicWall Zero-Days Amid Rising Attacks
INC ransomware is rapidly exploiting recently patched SonicWall zero-days, with researchers warning of a surge in attacks. This ransomware-as-a-service operation is now the most active threat actor taking advantage of the vulnerability chain.
SonicWall VPNs Targeted in Rapid Credential Stuffing Campaign
In a shocking 41-hour blitz, hackers launched a massive credential stuffing campaign that compromised 92 unique user accounts across 30 organizations using SonicWall VPNs. The rapid attack, which started on Saturday and abruptly ended on Monday, left a trail of breached accounts in its wake.
SonicWall VPN flaws exploited to install custom malware
A threat actor known as UTA0533 has been exploiting two zero-day vulnerabilities in SonicWall SMA1000 Secure Mobile Access appliances to install custom malware, starting as early as June 22, 2026. This attack uses a critical server-side request forgery and a high-severity command injection vulnerability to gain unauthorized access.
SonicWall SMA Zero-Days Exploited to Gain Root Access
A newly identified threat actor, UTA0533, has been caught exploiting zero-day vulnerabilities in SonicWall SMA VPN appliances to gain root access, using custom malware and other sophisticated tactics. This alarming attack was uncovered during an incident response in July, with two compromised appliances detected in a single environment.
Attackers Exploit Zero-Days in SonicWall Appliances
Cyber attackers are exploiting two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410, in SonicWall appliances, with ransomware attacks seemingly their ultimate goal. Rapid7's team has thwarted attempts at data exfiltration and encryption, but the threat remains.
SonicWall Zero-Days Exploited, Enable Admin Command Execution
SonicWall is urging immediate action to fix two zero-day vulnerabilities in its Secure Mobile Access (SMA) 1000 series appliances, which are being actively exploited by attackers to execute admin-level commands. These critical flaws, tracked as CVE-2026-15409 and CVE-2026-15410, could compromise your system's security if not patched right away.
SonicWall Disrupts Zero-Day Attacks with Urgent Patch for SMA1000 Flaws
SonicWall has issued a critical patch to combat zero-day attacks exploiting two vulnerabilities in its SMA1000 line, with attackers already taking advantage of these flaws in the wild. The company urges immediate action to prevent further damage from these actively exploited security gaps.
UK Healthcare Sector Faces Surge in Cyber-Attacks
The UK healthcare sector is under siege, facing a staggering tenfold surge in cyber-attacks with 264,000 intrusion events recorded in just the first five months of 2026. This alarming rise has left health networks being “stress-tested to breaking point.”
Hackers Exploit SonicWall VPN Flaw to Bypass MFA
In a shocking exploit, hackers have successfully bypassed multi-factor authentication on SonicWall VPN devices, breaching security in as little as 30 minutes. ReliaQuest researchers detected the first in-the-wild exploitation of CVE-2024-12802, warning of a swift and stealthy threat.
SonicWall Exclusive: State Crew Tied to Severe Breach
Think spies, not crooks — SonicWall says a state‑backed crew accessed customer firewall configuration backups, exposing blueprints for precise, targeted attacks. If you used their cloud backups, assume compromise: rotate keys and credentials, run a forensic review, and lock down remote access now.
SonicWall Exclusive Damaging State-Sponsored Cloud Breach
Imagine handing someone the wiring diagram to your house—now replace the house with your network: SonicWall says a state-sponsored actor used an API to access cloud-stored firewall configuration backups, exposing admin credentials, VPN keys and network blueprints that could let attackers slip past defenses.
firewall configuration backup files: Stunning Risk Exposed
SonicWall says cloud-stored firewall backups were accessed — and even encrypted configuration files can give attackers a dangerous roadmap to your network. Act now: audit affected devices, rotate credentials, enable MFA, and tighten management access to close the window for targeted attacks.
cloud backups Risky: Stunning SonicWall Breach Exposes All
Imagine your firewall’s master keys were left exposed — that’s what SonicWall customers discovered after the vendor revised its estimate from 5% to 100% of cloud backups affected, potentially exposing VPN credentials and network topology. If you used SonicWall cloud backups, inventory impacted devices, rotate credentials, and assume the worst while you await forensic details.