SonicWall VPNs under siege as suspected zero-day exploit fuels ransomware surge

SonicWall firewalls are at the center of a suspected zero-day attack, with ransomware groups bypassing multi-factor authentication to strike domain controllers within hours. Security firms like Huntress and Arctic Wolf have tied the activity to Akira ransomware, while Google flagged potential backdoor deployment. As investigations unfold, experts urge disabling SSL VPN on Gen 7 devices to avoid fallout from an evolving and active threat campaign.