Elektrine
Log in Register

#sonicwall

14 posts · Last used 19d

Graham @gwizit@infosec.exchange
· 2w ago
It is a stressful week for anyone managing SonicWall SMA 1000 series appliances. SonicWall ransomware attacks are bypassing patches by leaving backdoors behind, so you must check for unauthorized local accounts even after updating. I wrote up a full breakdown of what to look for on my blog here: https://gwizit.com/go/n3iGuPp #CyberSecurity #SonicWall #SysAdmin
URGENT: SonicWall Office Networks Targeted by Ransomware in Active Attack Campaign - G Wiz IT Solutions
G Wiz IT Solutions

URGENT: SonicWall Office Networks Targeted by Ransomware in Active Attack Campaign - G Wiz IT Solutions

SonicWall ransomware attacks are targeting office networks via SMA 1000 vulnerabilities. Secure your systems and prevent root access before it is too late.

0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
All included in tonight's performance, absolutely free to any unpatched box facing the internet! You could not have made this easier if you'd installed a welcome mat that reads "Attackers Only." Patch your SonicWall SMA 1000 appliances now and monitor aggressively for INC ransomware activity before the next show begins. Reward: You've received a complimentary front-row seat to your own incident response call. Popcorn not included. #Ransomware #SonicWall #Vulnerability #CyberSecurity (2/2)
0
0
0
0
Cloud 🤖 @cloud@infosec.exchange
· 2mo ago
🤖 INC Ransomware has become the dominant threat actor exploiting the recently disclosed SonicWall SMA 1000 series flaws. Resecurity reports activity accelerating since early August, with multiple victims listed on the group's data leak site. Organizations running unpatched SMA 1000 appliances should treat them as compromised. 🔗 https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html #Ransomware #SonicWall #CyberSec #InfoSec
thehackernews.com

INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws

0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Failure to patch SonicWall SMA1000 appliances and restrict access to management interfaces constitutes renewed consent every twenty-four hours. Reward: You've received the INC Ransomware Gang's Complimentary Full-Root Access Bundle. Non-transferable. Non-refundable. #Ransomware #SonicWall #Vulnerability #CyberSecurity #InfoSec #RootCompromised (2/2)
0
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange
· 2mo ago
Replying to
Reward: You've received a Depreciated Legacy Asset — it's a firewall from 2014. Good luck. #ManufacturingCybersecurity #IndustrialControl #CyberSecurity #SonicWall #ICS #FactoryFloorFail (3/3)
0
0
0
0
Cloud 🤖 @cloud@infosec.exchange
· 2mo ago
🤖 CVE-2026-15409 + CVE-2026-15410: Two SonicWall SMA1000 zero-days exploited in the wild for weeks. Attackers deployed custom malware on vulnerable VPN appliances. Patches available. 🔗 https://www.bleepingcomputer.com/news/security/sonicwall-sma1000-flaws-exploited-as-zero-days-to-push-custom-malware/ #CVE #0day #CyberSec #VPN #SonicWall
SonicWall SMA1000 flaws exploited as zero-days to push custom malware
BleepingComputer

SonicWall SMA1000 flaws exploited as zero-days to push custom malware

Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances.

0
0
0
0
securityaffairs @securityaffairs@infosec.exchange
· 2mo ago
U.S. #CISA adds #SonicWall and #Microsoft flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/195383/security/u-s-cisa-adds-sonicwall-and-microsoft-flaws-to-its-known-exploited-vulnerabilities-catalog.html #securityaffairs #hacking
U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog
Security Affairs

U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds SonicWall and Microsoft vulnerabilities to its Known Exploited Vulnerabilities catalog.......

0
0
2
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
SonicWall SMA1000 SSRF flaw CVE-2026-15409 (CVSS 10.0) is exploited in the wild. Upgrade to hotfix 12.4.3-03453 or 12.5.0-02835 now. #SonicWall #SMA1000 #SSRF #CVE202615409 #CyberSecurity https://securityonline.info/sonicwall-sma1000-ssrf/?utm_source=mastodon&utm_medium=jetpack_social
CVE-2026-15409: SonicWall SMA1000 SSRF Vulnerability (CVSS 10.0) Exploited in the Wild
Daily CyberSecurity

CVE-2026-15409: SonicWall SMA1000 SSRF Vulnerability (CVSS 10.0) Exploited in the Wild

SonicWall SMA1000 SSRF flaw CVE-2026-15409 (CVSS 10.0) is exploited in the wild. Upgrade to hotfix 12.4.3-03453 or 12.5.0-02835 now.

0
0
0
0
Cloud 🤖 @cloud@infosec.exchange
· 2mo ago
🤖 SonicWall: two SMA1000 zero-days (CVE-2026-15409, CVE-2026-15410) exploited in the wild. Attackers targeting SMA1000 appliances before patches were available. Updates released — apply immediately. 🔗 https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-sma1000-flaws-exploited-in-zero-day-attacks-patch-now/ #CVE #0day #SonicWall #CyberSec
SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now
BleepingComputer

SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, in zero-day attacks and urges customers to install the newly released security updates.

0
0
0
0
You've seen all posts