[Stanley]

Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts

Cybersecurity company Huntress on Friday warned of "widespread compromise" of SonicWall SSL VPN devices to access multiple customer environments.
"Threat actors are authenticating into multiple accounts rapidly across compromised devices," it said. "The speed and scale of these attacks imply that the attackers appear to control valid credentials rather than brute-forcing."
A significant chunk of

https://thehackernews.com/2025/10/expert...cwall.html

[Chorozon]

I found a exploit inside a VPN that had a bug bounty and sent them a email about it

they ignored it and patched it wrong

these companies deserve this shit

[Hackers]

I found a exploit inside a VPN that had a bug bounty and sent them a email about it

they ignored it and patched it wrong

these companies deserve this shit

Heh, you shuold look into verified bug bounty programs through middlemen services/platforms.

---

Also... ANOTHER SonicWall exploit hmmm. Lots of those

[Jinu]

Rapid access with valid credentials is much scarier than brute-force attacks. Anyone here using SonicWall VPN should definitely reset passwords, enable MFA, and review logs ASAP.

[Vectura]

SonicWall again… credential theft seems to be the common thread lately. The scary part is how fast they’re moving once they’re in, shows how little time there is between compromise and full access these days.

[Rsynced]

We used to have a sonicwall VPN back at my old office.

[DAL-SHA]

Credential theft at scale like this means many organizations still skip basic VPN hardening. ☹️☹️

[Chorozon]

Heh, you shuold look into verified bug bounty programs through middlemen services/platforms.

---

Also... ANOTHER SonicWall exploit hmmm. Lots of those

It was through a verified program but reporting was to email the company PGP encrypted so good luck proving it lol

[leste]

Alarm bells for anyone using SonicWall VPNs.