Max severity SonicWall SMA1000 flaw now exploited in attacks

BleepingComputerPublished 2026-10-09 12:39 UTC

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.

— BleepingComputer

Read at BleepingComputer

CVE-2026-102255

Severity: 10.0 Critical · CVSS 3.1 · CISA
Exploited: Not in CISA’s catalog
Published: 2026-10-07

SonicWall SMA1000: Affected: 12.4.3-03526 (platform-hotfix) and older versions; 12.5.0-02952 (platform-hotfix) and older versions

psirt.global.sonicwall.com · CVE record · NVD

Attackers exploit unpatched AhsayCBS flaws to deploy webshells and cryptocurrency miners

Attackers are exploiting vulnerabilities in the AhsayCBS backup platform, deploying webshells and cryptocurrency miners. Sources describe the flaws as unpatched; one reports that they enable authentication bypass and OS command injection.

1 hour ago

Image: The Hacker News
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
The Hacker NewsCybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two…
2 hours ago
Image: The Record
Belarusian hacktivists admit to 2023 breach of Russian state healthcare network
The RecordThe Belarusian Cyber Partisans concurred with Russian research that they indeed spent months inside the network for the Moscow Department of Health.
4 hours ago