[Stanley]

SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Report

SonicWall said it's actively investigating reports to determine if there is a new zero-day vulnerability following reports of a spike in Akira ransomware actors in late July 2025.
"Over the past 72 hours, there has been a notable increase in both internally and externally reported cyber incidents involving Gen 7 SonicWall firewalls where SSLVPN is enabled," the network security vendor said in a

https://thehackernews.com/2025/08/sonicw...l-ssl.html

[JoseMar]

Another SSL VPN vulnerability? I'm not surprised.
It feels like every time we add a layer of security, they find a way around it.

[Hackers]

They now say it's not a 0day
https://www.sonicwall.com/support/notice...4095336430

They say it's related to this CVE:
https://nvd.nist.gov/vuln/detail/cve-2024-40766
https://psirt.global.sonicwall.com/vuln-...-2024-0015

[sharn]

The attackers are exploiting known vulnerabilities, not zero-days.
This highlights the need for timely patching and proper configuration.

[Oh_Well]

The biggest problems are not 0days, but the providers who don't patch already known vulns on time

[The Pact]

People trusted this technology to keep their networks safe. Instead, it’s become a doorway for ransomware groups like Akira to walk right in. And the fact that it’s still “under investigation” while attacks are happening is unacceptable. We need accountability, not vague statements.

It’s costing people time, money, and peace of mind.

[JoshAllen]

Why does it seem like every VPN has a critical flaw?

[Laughing Man]

I wonder if this is tied to the MASSIVE DDOS that CF is reporting recently, I've assume it was something related to VPN network, because the amount of slaves needed to do that much damage, would need to be MASSIVE.

[JoshAllen]

I wonder if this is tied to the MASSIVE DDOS that CF is reporting recently, I've assume it was something related to VPN network, because the amount of slaves needed to do that much damage, would need to be MASSIVE.

I am pretty sure it is connected.

[oRequiem]

Another SSL VPN vulnerability? I'm not surprised.
It feels like every time we add a layer of security, they find a way around it.

Sadly will never end 🙄

[Yanix]

Investigating the zero-day is the right move by SonicWall. Users should be proactive and check their systems. Attackers move faster than most defenses.

[Laughing Man]

I am pretty sure it is connected.

Yeah I'm sure it is, you never know though.

[JoshAllen]

The biggest problems are not 0days, but the providers who don't patch already known vulns on time

And they post they posts after like "yay we fixed it" but it should have never happened in the first place.

[Jamika]

Hope they find it fast and fix everything before its too late

[Oh_Well]

And they post they posts after like "yay we fixed it" but it should have never happened in the first place.

Yes, but I guess you can't always avoid that. I mean attacks are becoming more sophisticated every day