+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts (/showthread.php?tid=6311789)
Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - Stanley - Oct 21, 2025
Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts
Cybersecurity company Huntress on Friday warned of "widespread compromise" of SonicWall SSL VPN devices to access multiple customer environments.
"Threat actors are authenticating into multiple accounts rapidly across compromised devices," it said. "The speed and scale of these attacks imply that the attackers appear to control valid credentials rather than brute-forcing."
A significant chunk of
https://thehackernews.com/2025/10/experts-warn-of-widespread-sonicwall.html
RE: Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - Chorozon - Oct 21, 2025
I found a exploit inside a VPN that had a bug bounty and sent them a email about it
they ignored it and patched it wrong
these companies deserve this shit
RE: Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - Hackers - Oct 22, 2025
(Oct 21, 2025 08:25 AM)Chorozon Wrote: I found a exploit inside a VPN that had a bug bounty and sent them a email about it
they ignored it and patched it wrong
these companies deserve this shit
Heh, you shuold look into verified bug bounty programs through middlemen services/platforms.
Also... ANOTHER SonicWall exploit hmmm. Lots of those
RE: Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - Jinu - Oct 22, 2025
Rapid access with valid credentials is much scarier than brute-force attacks. Anyone here using SonicWall VPN should definitely reset passwords, enable MFA, and review logs ASAP.
RE: Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - Vectura - Oct 22, 2025
SonicWall again… credential theft seems to be the common thread lately. The scary part is how fast they’re moving once they’re in, shows how little time there is between compromise and full access these days.
RE: Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - Rsynced - Oct 22, 2025
We used to have a sonicwall VPN back at my old office.
RE: Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - DAL-SHA - Oct 22, 2025
Credential theft at scale like this means many organizations still skip basic VPN hardening. ☹️☹️
RE: Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - Chorozon - Oct 22, 2025
(Oct 22, 2025 06:23 AM)enki Wrote: Heh, you shuold look into verified bug bounty programs through middlemen services/platforms.
Also... ANOTHER SonicWall exploit hmmm. Lots of those
It was through a verified program but reporting was to email the company PGP encrypted so good luck proving it lol
RE: Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - leste - Oct 30, 2025
Alarm bells for anyone using SonicWall VPNs.