+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report (/showthread.php?tid=6305684)
Pages: Pages
1
2
SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - Stanley - Aug 13, 2025
SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report
SonicWall said it's actively investigating reports to determine if there is a new zero-day vulnerability following reports of a spike in Akira ransomware actors in late July 2025.
"Over the past 72 hours, there has been a notable increase in both internally and externally reported cyber incidents involving Gen 7 SonicWall firewalls where SSLVPN is enabled," the network security vendor said in a
https://thehackernews.com/2025/08/sonicwall-investigating-potential-ssl.html
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - JoseMar - Sep 3, 2025
Another SSL VPN vulnerability? I'm not surprised.
It feels like every time we add a layer of security, they find a way around it.
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - Hackers - Sep 3, 2025
They now say it's not a 0day
https://www.sonicwall.com/support/notices/gen-7-and-newer-sonicwall-firewalls-sslvpn-recent-threat-activity/250804095336430
They say it's related to this CVE:
https://nvd.nist.gov/vuln/detail/cve-2024-40766
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - sharn - Sep 7, 2025
The attackers are exploiting known vulnerabilities, not zero-days.
This highlights the need for timely patching and proper configuration.
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - Oh_Well - Sep 7, 2025
The biggest problems are not 0days, but the providers who don't patch already known vulns on time
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - The Pact - Oct 2, 2025
People trusted this technology to keep their networks safe. Instead, it’s become a doorway for ransomware groups like Akira to walk right in. And the fact that it’s still “under investigation” while attacks are happening is unacceptable. We need accountability, not vague statements.
It’s costing people time, money, and peace of mind.
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - JoshAllen - Oct 2, 2025
Why does it seem like every VPN has a critical flaw?
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - Laughing Man - Oct 2, 2025
I wonder if this is tied to the MASSIVE DDOS that CF is reporting recently, I've assume it was something related to VPN network, because the amount of slaves needed to do that much damage, would need to be MASSIVE.
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - JoshAllen - Oct 2, 2025
(Oct 2, 2025 02:43 PM)Laughing Man Wrote: I wonder if this is tied to the MASSIVE DDOS that CF is reporting recently, I've assume it was something related to VPN network, because the amount of slaves needed to do that much damage, would need to be MASSIVE.
I am pretty sure it is connected.
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - oRequiem - Oct 2, 2025
(Sep 3, 2025 02:03 PM)JoseMar Wrote: Another SSL VPN vulnerability? I'm not surprised.
It feels like every time we add a layer of security, they find a way around it.
Sadly will never end 🙄
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - Yanix - Oct 3, 2025
Investigating the zero-day is the right move by SonicWall. Users should be proactive and check their systems. Attackers move faster than most defenses.
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - Laughing Man - Oct 3, 2025
(Oct 2, 2025 04:50 PM)Tyler™ Wrote: I am pretty sure it is connected.
Yeah I'm sure it is, you never know though.
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - JoshAllen - Oct 3, 2025
(Sep 7, 2025 08:15 AM)Oh_Well Wrote: The biggest problems are not 0days, but the providers who don't patch already known vulns on time
And they post they posts after like "yay we fixed it" but it should have never happened in the first place.
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - Jamika - Oct 3, 2025
Hope they find it fast and fix everything before its too late
RE: SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report - Oh_Well - Oct 4, 2025
(Oct 3, 2025 10:24 AM)Tyler™ Wrote: And they post they posts after like "yay we fixed it" but it should have never happened in the first place.
Yes, but I guess you can't always avoid that. I mean attacks are becoming more sophisticated every day