SonicWall

Attackers are actively exploiting a maximum-severity vulnerability, identified as CVE-2026-102255, in SonicWall SMA1000 appliances. This exploitation is occurring despite the release of a patch for the vulnerability just three days prior to the current reporting.

SonicWall has released critical hotfixes for four security vulnerabilities discovered in its Secure Mobile Access (SMA) 1000 series appliances. These appliances serve as gateways, providing remote workers with secure access to a company's internal network and applications.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Wednesday the addition of seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities have been actively targeted by malicious actors, indicating their significant risk to organizations.

SonicWall has issued security updates to address two critical zero-day vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series VPN appliances, which have already been exploited by malicious actors. These vulnerabilities, identified internally by SonicWall's William Perry and Adam Babis…

SonicWall issued a critical alert on March 13, 2024, warning customers that threat actors are actively exploiting two zero-day vulnerabilities within its Secure Mobile Access (SMA) 1000 series appliances. These vulnerabilities, identified as CVE-2024-3161 and CVE-2024-3162, are being chained together…

The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware groups are actively exploiting two recently patched vulnerabilities affecting SonicWall's Secure Mobile Access (SMA) 1000 series appliances. These exploits target a maximum-severity Server-Side Request Forgery (SSRF) flaw, identified…

The INC Ransomware operation has emerged as the dominant threat actor actively exploiting recently disclosed security flaws within SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. This escalation in activity was detailed in a report published by Resecurity…

The cybersecurity landscape this week is marked by a confluence of sophisticated threats, including AI-powered hacking, a significant number of vulnerabilities in Google Chrome, and targeted attacks against SonicWall devices.

SonicWall's Secure Mobile Access (SMA) 1000 series appliances were targeted by threat actors exploiting two zero-day vulnerabilities for several weeks before their public disclosure. These vulnerabilities allowed attackers to gain unauthorized access and deploy custom malware onto the affected VPN…

This week saw significant cybersecurity threats emerge, including critical vulnerabilities affecting widely used platforms. A remote code execution (RCE) flaw was identified in WordPress, allowing attackers to compromise websites with a single malicious request.

A previously undocumented threat actor, tracked by cybersecurity firm Volexity as UTA0533, exploited SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior to their public disclosure. Volexity's investigation into an incident response case revealed that these vulnerabilities…

SonicWall has issued a warning regarding the active exploitation of two zero-day vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series appliances. One of these vulnerabilities, identified as CVE-2026-15409, carries a critical CVSS score of 10.0 and allows for arbitrary…

SonicWall issued a critical security alert this week, warning that threat actors are actively exploiting two zero-day vulnerabilities within its Secure Mobile Access (SMA) 1000 series appliances. The vulnerabilities, identified as CVE-2026-15409 and CVE-2026-15410, have been leveraged in ongoing attacks…