SonicWall Confirms No New SSLVPN 0-Day – Ransomware Attack Linked to Old Vulnerability

Threat Score:
82
Cybersecurity News
5 hours ago

Overview

Cybersecurity firm SonicWall has officially addressed recent concerns a potential new zero-day vulnerability in its Secure Sockets Layer Virtual Private Network (SSLVPN) products. In a statement to Cybersecurity News, the company confirmed that recent ransomware attacks are not the result of a new flaw, but are instead linked to a previously identified and patched […]...

Related Articles

5 articles
5
SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw

SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw

BleepingComputer • 7 hours ago

SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw Bill Toulas August 7, 2025 11:27 AM 0 SonicWall says that recent Akira ransomware attacks exploiting Gen 7 firewalls with SSLVPN enabled are exploiting an older vulnerability rather than a zero-day flaw. The company says that the attackers are targeting CVE-2024-40766, an unauthorized access flaw fixed in August 2024. "We now have high confidence that the recent SSLVPN activity is not connected to a zero-day vulnerability,

Score
80
Read more