Akira claims it breached LG Energy Solution, exfiltrating 1.67 TB of internal corporate data, SQL databases, confidential projects, NDAs, and passport/visa information. Verification is pending.

Full breakdown:
https://www.technadu.com/lg-energy-solution-data-breach-may-have-exposed-1-7tb-of-employee-records-and-sql-data/613871/

#CyberSecurity #LGES #AkiraRansomware #ThreatIntel #DataLeak #ManufacturingSecurity

🚨 NEW ALERT — Akira Ransomware Threat Rising

CISA, FBI, DOD-Cyber Crime Center, HHS, and international partners have released a joint advisory highlighting critical updates on the evolving Akira ransomware campaign.

Akira actors — including Storm-1567, Howling Scorpius, and others — are expanding attacks across key infrastructure sectors, targeting SMBs and enterprises.

Full advisory available at:
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-109a

#Cybersecurity #InfoSec #Ransomware #AkiraRansomware #CISA

🚨 SonicWall VPN Alert
Huntress has reported a widespread compromise impacting over 100 accounts across 16 organizations. Attackers used valid credentials to gain access, some performing lateral movement and reconnaissance - possibly linked to Akira ransomware operations.

💬 How does your team mitigate credential-based VPN attacks? Comment below & follow @technadu for actionable threat intelligence.

#CyberSecurity #SonicWall #VPN #Ransomware #AkiraRansomware #PatchManagement #ThreatIntelligence #NetworkSecurity #Infosec #CyberAwareness #SecurityOps #TechNadu

Smash and Grab: Aggressive Akira Campaign Targets SonicWall VPNs, Deploys Ransomware in an Hour or Less
#AkiraRansomware #Akira #CVE_2024_40766
https://arcticwolf.com/resources/blog/smash-and-grab-aggressive-akira-campaign-targets-sonicwall-vpns/
Smash and Grab: Aggressive Akira Campaign Targets SonicWall VPNs, Deploys Ransomware in an Hour or Less - Arctic Wolf

Since late July 2025, Arctic Wolf has observed an ongoing surge in Akira ransomware activity targeting SonicWall firewalls through malicious SSL VPN logins.

Arctic Wolf

🚨 MFA isn’t bulletproof.
Akira ransomware is breaching SonicWall VPN accounts with MFA enabled, suspected by using stolen OTP seeds from earlier zero-day campaigns.
Even patched devices remain at risk if old creds weren’t reset.

💬 How much confidence do you still have in MFA for VPNs?
👉 Follow @technadu for ongoing ransomware + VPN security analysis.

#AkiraRansomware #SonicWall #VPN #MFABypass #Ransomware #CyberSecurity #TechNadu

Even top-tier MFA can't stop Akira ransomware—attackers exploited SonicWall flaws to disable defenses and launch double extortion strikes. Is your network really secure?

https://thedefendopsdiaries.com/akira-ransomware-bypassing-mfa-and-exploiting-sonicwall-vpn-vulnerabilities/

#akiraransomware
#sonicwall
#mfa
#vpnsecurity
#doubleextortion

Akira Ransomware: Bypassing MFA and Exploiting SonicWall VPN Vulnerabilities

Explore how Akira ransomware bypasses MFA and exploits SonicWall VPN flaws, with insights on double extortion tactics and defense strategies.

The DefendOps Diaries

Akira ransomware exploits three SonicWall flaws—including CVE-2024-40766 and SSLVPN misconfigs—to breach networks fast. Patch, enable MFA, and restrict access now. 🔐⚠️ #AkiraRansomware #Vulnerability

https://www.theregister.com/2025/09/10/akira_ransomware_abusing_sonicwall/

Akira ransomware crims abusing trifecta of SonicWall security holes for extortion attacks

: Patch, turn on MFA, and restrict access to trusted networks…or else

The Register
Akira Ransomware Group Utilizing SonicWall Devices for Initial Access

The Rapid7 MDR team is continually monitoring our customers’ environments for post-exploitation activity using the latest threat detections. Customers leveraging Rapid7’s Intelligence Hub can track the latest developments surrounding Akira.

Rapid7

🚨 Akira ransomware claims it breached Michigan Sugar, the U.S.’s 3rd-largest beet sugar processor.

📂 40 GB stolen data (corporate + personal, incl. driver’s licenses & medical info).

Ransomware is expanding beyond tech into critical food/agriculture supply chains.

Follow @technadu for in-depth #InfoSec coverage.

#AkiraRansomware #CyberAttack #DataBreach #MichiganSugar #CyberSecurity

Akira ransomware uses legitimate Windows drivers to bypass AV/EDR tools, targeting SonicWall VPNs.

🛡️ Paxion Cyber detects BYOVD threats and strengthens VPN security. Act now.

🔗 https://cybersecuritynews.com/akira-ransomware-uses-windows-drivers/

#AkiraRansomware #SonicWall #CyberSecurity #BYOVD #MDR #PaxionCyber