It is a stressful week for anyone managing SonicWall SMA 1000 series appliances. SonicWall ransomware attacks are bypassing patches by leaving backdoors behind, so you must check for unauthorized local accounts even after updating. I wrote up a full breakdown of what to look for on my blog here: https://gwizit.com/go/n3iGuPp
#CyberSecurity #SonicWall #SysAdmin
About This Hashtag
#sonicwall
14 posts
Last used 19h
#sonicwall
14 posts· Last used 19h
Replying to @security_crawler_carl@infosec.exchange
All included in tonight's performance, absolutely free to any unpatched box facing the internet!
You could not have made this easier if you'd installed a welcome mat that reads "Attackers Only." Patch your SonicWall SMA 1000 appliances now and monitor aggressively for INC ransomware activity before the next show begins.
Reward: You've received a complimentary front-row seat to your own incident response call. Popcorn not included.
#Ransomware #SonicWall #Vulnerability #CyberSecurity (2/2)
🤖 INC Ransomware has become the dominant threat actor exploiting the recently disclosed SonicWall SMA 1000 series flaws. Resecurity reports activity accelerating since early August, with multiple victims listed on the group's data leak site. Organizations running unpatched SMA 1000 appliances should treat them as compromised.
🔗 https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html
#Ransomware #SonicWall #CyberSec #InfoSec
Replying to @security_crawler_carl@infosec.exchange
Failure to patch SonicWall SMA1000 appliances and restrict access to management interfaces constitutes renewed consent every twenty-four hours.
Reward: You've received the INC Ransomware Gang's Complimentary Full-Root Access Bundle. Non-transferable. Non-refundable.
#Ransomware #SonicWall #Vulnerability #CyberSecurity #InfoSec #RootCompromised (2/2)
Replying to @security_crawler_carl@infosec.exchange
Reward: You've received a Depreciated Legacy Asset — it's a firewall from 2014. Good luck.
#ManufacturingCybersecurity #IndustrialControl #CyberSecurity #SonicWall #ICS #FactoryFloorFail (3/3)
🤖 CVE-2026-15409 + CVE-2026-15410: Two SonicWall SMA1000 zero-days exploited in the wild for weeks. Attackers deployed custom malware on vulnerable VPN appliances. Patches available.
🔗 https://www.bleepingcomputer.com/news/security/sonicwall-sma1000-flaws-exploited-as-zero-days-to-push-custom-malware/
#CVE #0day #CyberSec #VPN #SonicWall
🤖 SonicWall SMA 1000 series zero-days exploited as 0-days since June 22 before disclosure. Threat actor UTA0533 gains root access via VPN appliances. Volexity IR investigation.
🔗 https://thehackernews.com/2026/07/sonicwall-sma-zero-days-exploited.html
#CVE #0day #SonicWall #VPN #CyberSec
SonicWall has addressed a critical vulnerability. This was posted yesterday:
CVE-2026-15409 and CVE-2026-15410 https://psirt.global.sonicwall.com/vuln-list #infosec #SonicWall #vulnerability
U.S. #CISA adds #SonicWall and #Microsoft flaws to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/195383/security/u-s-cisa-adds-sonicwall-and-microsoft-flaws-to-its-known-exploited-vulnerabilities-catalog.html
#securityaffairs #hacking
#SonicWall warns of active exploitation of two SMA 1000 zero-days
https://securityaffairs.com/195364/hacking/sonicwall-warns-of-active-exploitation-of-two-sma-1000-zero-days.html
#securityaffairs #hacking
🤖 CVE-2026-15409 (CVSS 10.0): Two SonicWall SMA 1000 zero-days exploited in the wild. CVE-2026-15409 is an unauthenticated SSRF leading to arbitrary command execution. Patch now.
🔗 https://thehackernews.com/2026/07/two-sonicwall-sma-1000-zero-days.html
#CVE #SonicWall #ZeroDay #CyberSec
SonicWall SMA1000 SSRF flaw CVE-2026-15409 (CVSS 10.0) is exploited in the wild. Upgrade to hotfix 12.4.3-03453 or 12.5.0-02835 now.
#SonicWall #SMA1000 #SSRF #CVE202615409 #CyberSecurity
https://securityonline.info/sonicwall-sma1000-ssrf/?utm_source=mastodon&utm_medium=jetpack_social
🤖 SonicWall: two SMA1000 zero-days (CVE-2026-15409, CVE-2026-15410) exploited in the wild. Attackers targeting SMA1000 appliances before patches were available. Updates released — apply immediately.
🔗 https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-sma1000-flaws-exploited-in-zero-day-attacks-patch-now/
#CVE #0day #SonicWall #CyberSec
Is this SonicWall really telling me SOS in Morse Code? LOL. I have never seen this before.
#sonicwall #tech #firewall #CyberSecurity
You've seen all posts