SONICWALL INVESTIGATES 'CYBER INCIDENTS,' INCLUDING RANSOMWARE TARGETING SUSPECTED 0-DAY

Summary from the TLDR InfoSec newsletter

SonicWall is probing recent ransomware attacks on its Gen 7 firewalls, potentially exploiting a zero-day in SSL VPNs. Even with MFA enabled, attackers bypassed controls, deployed ransomware, and quickly pivoted to internal systems. SonicWall has urged customers to disable SSL VPN and use mitigation steps ASAP while waiting for official patches.