ACSC Warns Of Sonicwall Access Control Vulnerability Actively Exploited In Attacks - Cybernoz - Cybersecurity News

Akira Ransomware Exploits SonicWall CVE-2024-40766 in 2025 Attack Surge

In the ever-evolving world of cybersecurity threats, a persistent vulnerability in SonicWall firewalls has become a prime target for ransomware operators, highlighting the critical risks of delayed patching in enterprise networks. Recent attacks, particularly those linked to the Akira ransomware group, exploit CVE-2024-40766, an improper access control flaw patched over a year ago but still plaguing unupdated systems. This vulnerability allows u…

Ransomware gang going after improperly patched SonicWall firewalls

Vulnerable SonicWall firewalls that should have been patched a year ago for an access control vulnerability are being hacked by a ransomware gang, Australia’s cybersecurity authorities warned this week. The Australian Cyber Security Centre is seeing an increase in active exploitation in that country of a 2024 critical vulnerability in SonicWall firewalls with SSL VPN enabled. “We are aware of the Akira ransomware targeting vulnerable Australian …

SonicWall SSL VPN Flaw CVE-2024-40766 Actively Exploited

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued an urgent alert regarding active exploitation of a critical security flaw identified as CVE-2024-40766, impacting multiple generations of SonicWall SSL VPN devices. According to the advisory, threat actors, including those deploying Akira ransomware, are actively leveraging this vulnerability to gain unauthorized network access and, in some cases, crash…

ACSC Warns Of Sonicwall Access Control Vulnerability Actively Exploited In Attacks - Cybernoz - Cybersecurity News

The Australian Cyber Security Centre (ACSC) has issued a critical alert regarding a severe access control vulnerability in SonicWall products that is being actively exploited in attacks. The flaw, tracked as CVE-2024-40766, affects multiple generations of SonicWall firewalls and carries a critical CVSS score of 9.3, highlighting the significant risk it poses to organizations. The advisory notes a recent increase in exploitation targeting Austral…