SonicWall SSL VPN Breach: When Valid Logins Become a Hacker’s Playground
Attackers are having a field day with SonicWall SSL VPNs by using valid logins like they’re VIP passes, compromising over 100 accounts from 16 customers. Huntress warns that these cyber mischief-makers are not brute-forcing but breezing through with legitimate credentials. Time to patch up those firewalls before they become the next cyber circus!
Hot Take:
When it comes to cybersecurity, SonicWall just took a ride on the “Oops Express!” It’s one thing to have your house broken into, but it’s another when you hand the burglars the key. Someone needs to change the locks—and fast!
Key Points:
- Huntress warns of a widespread breach of SonicWall SSL VPNs with valid credentials.
- Attackers accessed firewall backup files, exposing encrypted credentials.
- Over 100 accounts across 16 customers were compromised since October 4.
- SonicWall confirmed that the breach involved encrypted credentials and configs.
- The disclosure coincides with increased ransomware attacks, notably Akira.
Already a member? Log in here