Among many others CISA does stuff like this. Apparently it won't be for long. www.thestack.technology/sonicwall-ss...
SonicWall SSLVPN authentication flaw exploited warns CISA
Bug lets attackers to bypass even accounts with multi-factor authentication enabled.
www.thestack.technology
February 19, 2025 at 11:26 PM
Among many others CISA does stuff like this. Apparently it won't be for long. www.thestack.technology/sonicwall-ss...
SonicWall says hackers are exploiting a new zero-day bug to breach customer networks
SonicWall says hackers are exploiting a new zero-day bug to breach customer networks
SonicWall said the bug is "confirmed as being actively exploited in the wild" by malicious hackers.
© 2024 TechCrunch. All rights reserved. For personal use only.
tcrn.ch
January 27, 2025 at 11:28 PM
SonicWall says hackers are exploiting a new zero-day bug to breach customer networks
As I was grabbing this photo, one of the booth staff walked up and said "are you familiar with SonicWall?"
I said "Yes, I work in incident response - of course I'm familiar with SonicWall. I feel like I owe you 'referral money' sometimes."
I said "Yes, I work in incident response - of course I'm familiar with SonicWall. I feel like I owe you 'referral money' sometimes."
Insert joke about "you're never alone because a threat actor is probably on the device with you."
April 30, 2025 at 10:40 PM
As I was grabbing this photo, one of the booth staff walked up and said "are you familiar with SonicWall?"
I said "Yes, I work in incident response - of course I'm familiar with SonicWall. I feel like I owe you 'referral money' sometimes."
I said "Yes, I work in incident response - of course I'm familiar with SonicWall. I feel like I owe you 'referral money' sometimes."
NEW: Fintech giant Marquis, which had a ransomware attack last year exposing a huge number of consumer banking customers, is now suing its firewall provider SonicWall, claiming hackers stole its firewall backup file from SonicWall's cloud that ultimately allowed hackers to breach Marquis' network.
Marquis sues firewall provider SonicWall, alleges security failings with its firewall backup led to ransomware attack | TechCrunch
Fintech giant Marquis is suing its firewall provider SonicWall, claiming that an earlier breach with SonicWall allowed hackers to deploy ransomware on Marquis' network.
techcrunch.com
February 24, 2026 at 4:41 PM
NEW: Fintech giant Marquis, which had a ransomware attack last year exposing a huge number of consumer banking customers, is now suing its firewall provider SonicWall, claiming hackers stole its firewall backup file from SonicWall's cloud that ultimately allowed hackers to breach Marquis' network.
This feels... timely.
thehackernews.com/2025/05/soni...
thehackernews.com/2025/05/soni...
May 1, 2025 at 5:36 PM
This feels... timely.
thehackernews.com/2025/05/soni...
thehackernews.com/2025/05/soni...
CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
A server-side request forgery (SSRF) in SonicWall SMA…
https://planetbriefing.com/events/cve-2026-15409-sonicwall-sma1000-appliances-server-side-request-forgery-vulnerab-6c56702cb80d
#Technology #UnitedStates
A server-side request forgery (SSRF) in SonicWall SMA…
https://planetbriefing.com/events/cve-2026-15409-sonicwall-sma1000-appliances-server-side-request-forgery-vulnerab-6c56702cb80d
#Technology #UnitedStates
September 27, 2026 at 12:46 PM
CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
A server-side request forgery (SSRF) in SonicWall SMA…
https://planetbriefing.com/events/cve-2026-15409-sonicwall-sma1000-appliances-server-side-request-forgery-vulnerab-6c56702cb80d
#Technology #UnitedStates
A server-side request forgery (SSRF) in SonicWall SMA…
https://planetbriefing.com/events/cve-2026-15409-sonicwall-sma1000-appliances-server-side-request-forgery-vulnerab-6c56702cb80d
#Technology #UnitedStates
Fintech giant Marquis is suing its firewall provider SonicWall, claiming that an earlier breach with SonicWall allowed hackers to deploy ransomware on Marquis' network.
Marquis sues firewall provider SonicWall, alleges security failings with its firewall backup led to ransomware attack | TechCrunch
Fintech giant Marquis is suing its firewall provider SonicWall, claiming that an earlier breach with SonicWall allowed hackers to deploy ransomware on Marquis' network.
techcrunch.com
February 24, 2026 at 4:40 PM
Fintech giant Marquis is suing its firewall provider SonicWall, claiming that an earlier breach with SonicWall allowed hackers to deploy ransomware on Marquis' network.
For horrible IT stories: At a previous MSP I went out to a lawyer client to replace a Sonicwall that had completely failed after a couple weeks of issues. Went to what was supposed to be their network closet (just a little cupboard in a tiny breakroom) and found everything but the Sonicwall. (1/2)
December 20, 2024 at 6:54 PM
For horrible IT stories: At a previous MSP I went out to a lawyer client to replace a Sonicwall that had completely failed after a couple weeks of issues. Went to what was supposed to be their network closet (just a little cupboard in a tiny breakroom) and found everything but the Sonicwall. (1/2)
-Pentagon has +70K cyber staff
-Hackers steal SonicWall firewall configs
-DeepSeek returns flawed code on purpose for minorities
-UK arrests two Scattered Spider members
-Hackers steal SonicWall firewall configs
Podcast: risky.biz/RBNEWS480/
Newsletter: news.risky.biz/risky-bullet...
-Hackers steal SonicWall firewall configs
-DeepSeek returns flawed code on purpose for minorities
-UK arrests two Scattered Spider members
-Hackers steal SonicWall firewall configs
Podcast: risky.biz/RBNEWS480/
Newsletter: news.risky.biz/risky-bullet...
September 19, 2025 at 9:51 AM
-Pentagon has +70K cyber staff
-Hackers steal SonicWall firewall configs
-DeepSeek returns flawed code on purpose for minorities
-UK arrests two Scattered Spider members
-Hackers steal SonicWall firewall configs
Podcast: risky.biz/RBNEWS480/
Newsletter: news.risky.biz/risky-bullet...
-Hackers steal SonicWall firewall configs
-DeepSeek returns flawed code on purpose for minorities
-UK arrests two Scattered Spider members
-Hackers steal SonicWall firewall configs
Podcast: risky.biz/RBNEWS480/
Newsletter: news.risky.biz/risky-bullet...
Schlimmer als zunächst gedacht: Der Firewallhersteller Sonicwall muss seine Einschätzung zum kürzlich gemeldeten Sicherheitsvorfall drastisch korrigieren. 🚨
Zum Artikel: heise.de/-10748910
Zum Artikel: heise.de/-10748910
October 10, 2025 at 12:08 PM
Schlimmer als zunächst gedacht: Der Firewallhersteller Sonicwall muss seine Einschätzung zum kürzlich gemeldeten Sicherheitsvorfall drastisch korrigieren. 🚨
Zum Artikel: heise.de/-10748910
Zum Artikel: heise.de/-10748910
New: SonicWall is urging customers to disable SSLVPN as researchers report ransomware attacks targeting SonicWall firewalls. Particularly problematic for big companies that rely on these devices. Arctic Wolf and Huntress say it's likely a zero-day under attack but SonicWall is still investigating.
SonicWall urges customers to disable SSLVPN amid reports of ransomware attacks | TechCrunch
Security researchers say they have evidence that ransomware gangs are hacking into large companies that rely on fully-patched SonicWall firewalls. The researchers say it's likely the flaw is a "zero-d...
techcrunch.com
August 5, 2025 at 1:55 PM
New: SonicWall is urging customers to disable SSLVPN as researchers report ransomware attacks targeting SonicWall firewalls. Particularly problematic for big companies that rely on these devices. Arctic Wolf and Huntress say it's likely a zero-day under attack but SonicWall is still investigating.
SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN
SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN
Roses are red, violets are blue, CVE-2024-53704 is perfect for a ransomware crew
Miscreants are actively abusing a high-severity authentication bypass bug in unpatched internet-facing SonicWall firewalls following the public release of…
dlvr.it
February 14, 2025 at 10:58 PM
SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN
New: SonicWall says hackers are exploiting a new zero-day bug in one of its products to breach corporate networks.
This is the latest in a long list of bugs in security products that allow the hacking of big networks, which these devices are tasked with protecting.
techcrunch.com/2025/01/27/s...
This is the latest in a long list of bugs in security products that allow the hacking of big networks, which these devices are tasked with protecting.
techcrunch.com/2025/01/27/s...
SonicWall says hackers are exploiting a new zero-day bug to breach customer networks | TechCrunch
SonicWall said the bug is "confirmed as being actively exploited in the wild" by malicious hackers.
techcrunch.com
January 27, 2025 at 11:31 PM
New: SonicWall says hackers are exploiting a new zero-day bug in one of its products to breach corporate networks.
This is the latest in a long list of bugs in security products that allow the hacking of big networks, which these devices are tasked with protecting.
techcrunch.com/2025/01/27/s...
This is the latest in a long list of bugs in security products that allow the hacking of big networks, which these devices are tasked with protecting.
techcrunch.com/2025/01/27/s...
Insert joke about "you're never alone because a threat actor is probably on the device with you."
April 30, 2025 at 10:37 PM
Insert joke about "you're never alone because a threat actor is probably on the device with you."
SonicWall urges customers to disable SSLVPN amid reports of ransomware attacks
SonicWall urges customers to disable SSLVPN amid reports of ransomware attacks | TechCrunch
Security researchers say they have evidence that ransomware gangs are hacking into large companies that rely on fully-patched SonicWall firewalls. The researchers say it's likely the flaw is a "zero-day" bug currently unknown to SonicWall.
techcrunch.com
August 5, 2025 at 2:01 PM
SonicWall urges customers to disable SSLVPN amid reports of ransomware attacks
Tja .. Managed Security Service Provider (MSSP) fallen bald unter #NIS2 und ja, die möchten dringend reguliert werden. 🔥
Datenleck bei Sonicwall: Alle Cloud-Backups von Firewalls gestohlen
"Hieß es zunächst, es seien nur wenige Prozent der Sicherungsdaten betroffen..." www.heise.de/news/Datenle...
Datenleck bei Sonicwall: Alle Cloud-Backups von Firewalls gestohlen
"Hieß es zunächst, es seien nur wenige Prozent der Sicherungsdaten betroffen..." www.heise.de/news/Datenle...
Datenleck bei Sonicwall: Alle Cloud-Backups von Firewalls gestohlen
Hieß es zunächst, es seien nur wenige Prozent der Sicherungsdaten betroffen, wird nun klar: Es sind tatsächlich 100 Prozent - Admins sollten handeln.
www.heise.de
October 10, 2025 at 5:18 PM
Tja .. Managed Security Service Provider (MSSP) fallen bald unter #NIS2 und ja, die möchten dringend reguliert werden. 🔥
Datenleck bei Sonicwall: Alle Cloud-Backups von Firewalls gestohlen
"Hieß es zunächst, es seien nur wenige Prozent der Sicherungsdaten betroffen..." www.heise.de/news/Datenle...
Datenleck bei Sonicwall: Alle Cloud-Backups von Firewalls gestohlen
"Hieß es zunächst, es seien nur wenige Prozent der Sicherungsdaten betroffen..." www.heise.de/news/Datenle...
SonicWall has warned customers to disable SSLVPN services due to ransomware gangs potentially exploiting an unknown security vulnerability in SonicWall Gen 7 firewalls to breach networks over the past few weeks.
SonicWall urges admins to disable SSLVPN amid rising attacks
SonicWall has warned customers to disable SSLVPN services due to ransomware gangs potentially exploiting an unknown security vulnerability in SonicWall Gen 7 firewalls to breach networks over the past few weeks.
www.bleepingcomputer.com
August 5, 2025 at 11:28 AM
SonicWall has warned customers to disable SSLVPN services due to ransomware gangs potentially exploiting an unknown security vulnerability in SonicWall Gen 7 firewalls to breach networks over the past few weeks.
⚠️ Am 17.09.2025 informierte SonicWall über einen IT-Sicherheitsvorfall im Rahmen der MySonicWall Cloud Backup Funktion. Aktuelle Untersuchungen zeigen, dass die Backups sämtlicher Nutzer abgeflossen sind, auch Konfigurationsinfos eingesetzter SonicWall-Produkte.
https://www.bsi.bund.de/dok/1184252
https://www.bsi.bund.de/dok/1184252
October 9, 2025 at 5:00 PM
⚠️ Am 17.09.2025 informierte SonicWall über einen IT-Sicherheitsvorfall im Rahmen der MySonicWall Cloud Backup Funktion. Aktuelle Untersuchungen zeigen, dass die Backups sämtlicher Nutzer abgeflossen sind, auch Konfigurationsinfos eingesetzter SonicWall-Produkte.
https://www.bsi.bund.de/dok/1184252
https://www.bsi.bund.de/dok/1184252
-US raids SIM farm in New York
-EU airport disruptions caused by ransomware
-Thieves steal gold from French museum after cyberattack
-SonicWall firmware update removes rootkit
-Jaguar ransomware incident extends to October
Podcast: risky.biz/RBNEWS482/
Newsletter: news.risky.biz/risky-bullet...
-EU airport disruptions caused by ransomware
-Thieves steal gold from French museum after cyberattack
-SonicWall firmware update removes rootkit
-Jaguar ransomware incident extends to October
Podcast: risky.biz/RBNEWS482/
Newsletter: news.risky.biz/risky-bullet...
September 24, 2025 at 8:32 AM
-US raids SIM farm in New York
-EU airport disruptions caused by ransomware
-Thieves steal gold from French museum after cyberattack
-SonicWall firmware update removes rootkit
-Jaguar ransomware incident extends to October
Podcast: risky.biz/RBNEWS482/
Newsletter: news.risky.biz/risky-bullet...
-EU airport disruptions caused by ransomware
-Thieves steal gold from French museum after cyberattack
-SonicWall firmware update removes rootkit
-Jaguar ransomware incident extends to October
Podcast: risky.biz/RBNEWS482/
Newsletter: news.risky.biz/risky-bullet...
A new SonicWall zero-day (CVE-2025-23006):
psirt.global.sonicwall.com/vuln-detail/...
"SonicWall PSIRT has been notified of possible active exploitation of the referenced vulnerability by threat actors."
psirt.global.sonicwall.com/vuln-detail/...
"SonicWall PSIRT has been notified of possible active exploitation of the referenced vulnerability by threat actors."
Security Advisory
psirt.global.sonicwall.com
January 23, 2025 at 5:52 PM
A new SonicWall zero-day (CVE-2025-23006):
psirt.global.sonicwall.com/vuln-detail/...
"SonicWall PSIRT has been notified of possible active exploitation of the referenced vulnerability by threat actors."
psirt.global.sonicwall.com/vuln-detail/...
"SonicWall PSIRT has been notified of possible active exploitation of the referenced vulnerability by threat actors."