CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs

CISA confirmed ransomware gangs are exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw. The agency urged immediate patching and warned of active attacks against unpatched devices holding network credentials. Administrators should apply firmware updates as soon as possible to prevent potential compromise and lateral movement within affected organizations.