Ransomwarecritical
SonicWall SSL VPN Attacks Escalate, Bypassing MFA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-40766 | Improper Access Control in SonicWall SonicOS Management (Gen 5/6/7 Firewalls) | 9.8 | 18% | KEVRansomware | KEV |
From the original article
2 min read at infosecurity-magazine.com
Security experts have warned of a surge in malicious activity from Akira ransomware actors targeted at victims running SonicWall SSL VPN appliances. The campaign appears to have begun back in late July, with initial reports suggesting a zero-day vulnerability may have been to blame. These were later dismissed, with legacy bug CVE-2024-40766 blamed for initial access.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.