Do Son
At a Glance Category Details Actor or Group Unattributed threat actor (Chinese-language artifacts observed) Activity Type Mass...
SonicWall
TL;DR SonicWall SMA 1000 vulnerabilities are currently being actively exploited in the wild. Threat actors chain these...
SonicWall released a security bulletin detailing three security flaws in on-premise management appliances. These SonicWall NSM vulnerabilities...
TL;DR SonicWall published advisory SNWLID-2026-0016 on September 1, 2026. It confirms active exploitation of two SMA1000 flaws....
Two severe SonicWall NetExtender vulnerabilities impact Linux users today. These security flaws allow remote attackers to write...
Malware family ROOTRUN, KNUCKLEBALL, Suo5, ORANGETAIL Threat actor UTA0533 (pre-disclosure cluster, suspected link to INC Ransomware); INC...
At a glance Actor / group UTA0533 (Volexity tracking cluster); no nation or identity confirmed Activity type...
TL;DR SonicWall patched a critical SonicWall SMA1000 vulnerability, CVE-2026-15409, on July 14, 2026. Attackers are exploiting it...
TL;DR SonicWall has released hotfixes for two actively exploited flaws in SMA1000 secure access appliances. The SonicWall...
SonicWall has released a critical security advisory addressing three distinct vulnerabilities in SonicOS that could allow attackers...
SonicWall has released a series of patches for its SMA 1000 series appliances to address four distinct...
Between February 22 and February 25, 2026, threat intelligence firm GreyNoise detected a highly coordinated reconnaissance campaign...
SonicWall has issued an urgent security advisory for its high-end remote access appliances, patching a vulnerability that,...
A sudden surge in mass scanning activity has targeted two major enterprise security vendors, Palo Alto Networks...
SonicWall has released security updates addressing two vulnerabilities in its Email Security appliances, including one that could...
SonicWall has issued a security advisory for a newly identified pre-authentication stack-based buffer overflow vulnerability in its...
Between July and August 2025, global security teams have observed a resurgence in Akira ransomware incidents targeting...
Arctic Wolf has observed a major uptick in Akira ransomware activity since late July 2025, with attackers...
SonicWall, a leading provider of network security solutions, has disclosed a recent security incident involving the exposure...
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued an alert on the active...
Recently, eSentire’s Threat Response Unit (TRU) investigated a ransomware attack that it has attributed to an affiliate...
Huntress has issued a critical alert about what appears to be a zero-day vulnerability in SonicWall Secure...