SonicWall SMA1000 flaws exploited as zero-days to push custom malware

Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited as zero-days for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. The attacks targeted the SMA1000 series, enabling attackers to compromise network security. SonicWall has since released patches, but the incidents underscore the danger of unpatched zero-day flaws in critical infrastructure.