Campaign #compromising #SonicWall #SSLVPN instances since October 4, 2025 (100 infections in 16 organizations known as of October 10). There is a suspicion, that the firewalls created cloud backups itself - without admin approval.
https://borncity.com/win/2025/10/12/sonicwall-sslvpn-sicherheitslucken-breit-ausgenutzt/

