SonicWall: state actor stole firewall config backups of every cloud-backup customer
Teaser from the source
SonicWall and Mandiant confirmed that a state-sponsored actor used an API call to pull firewall configuration backup files for all customers using MySonicWall cloud backup, after first saying fewer than 5% were affected. The files include credentials and network details, so customers had to reset firewall, VPN, directory and API secrets.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on SonicWall
Other advisories
- CriticalCVE-2026-102257SonicWall SMA1000: Mehrere Schwachstellen
- HighCVE-2026-96540SonicWall Network Security Manager (NSM): fehlerhafte Autorisierung
- HighCVE-2026-100232SonicWall Network Security Manager (NSM): Betriebssystem-Befehlsinjektion
- HighCVE-2026-100232SonicWall Network Security Manager (NSM): Betriebssystem-Befehlsinjektion
- HighCVE-2026-96540SonicWall Network Security Manager (NSM): fehlerhafte Autorisierung
- CriticalCVE-2026-102255Critical Vulnerability in SonicWall SMA1000 Series
- MediumCVE-2026-102258SonicWall SMA: Cross-Site-Scripting (XSS)
- MediumCVE-2026-102258SonicWall SMA: Cross-Site-Scripting (XSS)
Other news entries
- Multiples vulnérabilités dans Sonicwall Network Security Manager (15 octobre 2026)NewsCERT-FR (ANSSI)
- SonicWall SMA1000: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under AttackNewsDark Reading
- Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After PatchNewsThe Hacker News
- Critical SonicWall Vulnerability Exploited Days After DisclosureNewsSecurityWeek
- Max severity SonicWall SMA1000 flaw now exploited in attacksNewsBleepingComputer
- SonicWall and Splunk Patch Critical VulnerabilitiesNewsSecurityWeek
- SonicWall SMA1000: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025
ID