Akira Ransomware Uses Windows Drivers to Bypass AV/EDR in SonicWall Attacks

Threat Score:
65
Cybersecurity News
20 hours ago

Overview

A sophisticated evasion technique employed by Akira ransomware affiliates, exploiting legitimate Windows drivers to bypass antivirus and endpoint detection and response (EDR) systems during recent SonicWall VPN attack campaigns.  The attacks, which have escalated from late July through early August 2025, demonstrate the threat actors’ evolving tactics to maintain persistence and avoid detection in compromised […]...

Related Articles

5 articles
3

Trend Micro fixes two actively exploited Apex One RCE flaws

Security Affairs • 16 hours ago

Trend Micro patched two critical Apex One flaws (CVE-2025-54948, CVE-2025-54987) exploited in the wild, allowing RCE via console injection. Trend Micro released fixes for two critical vulnerabilities, tracked as CVE-2025-54948 and CVE-2025-54987 (CVSS score of 9.4), in Apex One on-prem consoles. The cybersecurity vendor confirmed that both issues were actively exploited in the wild. Both […]

Score
74
Read more
4

2025-08-07 - Cluster AI Daily Threat Brief

ThreatCluster • 8 hours ago

# Daily Threat Intelligence Brief - August 7, 2025 ## Executive Summary Today’s threat landscape presents a multifaceted challenge, with phishing and ransomware emerging as the most critical threats. Recent reports indicate a surge in sophisticated attacks targeting prominent platforms such as Google and Salesforce, leading to significant user data exfiltration. Phishing tactics, including the use of fake CAPTCHA systems to deliver malware, have further exacerbated vulnerabilities within organ

Score
73
Read more