Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
The Akira ransomware group has been identified as a significant threat to critical infrastructure, with the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warning of its active ransomware attacks. Since its emergence in March 2023, Akira has exploited vulnerabilities in edg...
CVE-2024-40766 is an improper access control vulnerability in SonicWall SonicOS affecting Gen 5, Gen 6, and Gen 7 firewalls. The vulnerability, with a CVSS score of 9.3, allows unauthorized access and can crash the device. SonicWall serves approximately 500,000 businesses, many of which lack dedicat...
In June 2026, a surge in attacks targeting SonicWall Gen 7 firewalls has been reported, exploiting CVE-2024-40766, an improper access control flaw. This vulnerability allows threat actors to gain unauthorized access, particularly during migrations from Gen 6 to Gen 7 firewalls where passwords were n...
Marquis Software Solutions experienced a ransomware attack on August 14, 2025, leading to the exposure of sensitive customer information, including Social Security Numbers and names. The company serves numerous banks and credit unions, and the breach affected member accounts dating back to before 20...
