SonicWall SMA1000 Under Active Ransomware Exploitation
INC ransomware exploits SonicWall SMA1000 for root access; CVE-2026-18577 N-central auth bypass re-patched; Midnight Blizzard steals creds via hotel Wi-Fi.
Posts tagged: Russian-Apt
Minnesota Water OT Attack — 30+ Plants Hit
Coordinated OT attack disrupts 30+ Minnesota water utilities. CVE-2026-20316 Cisco FMC zero-day exploited. Russian Exchange OWA backdoor survives password.
Zimbra Zero-Click Exploit Steals 90 Days of Email
Russian Laundry Bear exploits Zimbra zero-click flaw to steal email and 2FA codes. Plus Clop targets PLM servers and CVE-2026-16232 hits Check Point.
libssh2 PoC Flips SSH Trust — CVE-2026-55200
CVE-2026-55200 public PoC turns SSH clients into targets. Plus 14.2M credentials exposed at six ISPs and Russian APTs exploiting messaging apps.
FortiBleed Attribution — Russian IAB, 110M Credentials
Russian IAB behind FortiBleed siphoned 110M VPN credentials since February. FFmpeg PixelSmash RCE hits media servers. Squidbleed leaks cleartext creds.