On August 4, SonicWall issued a threat activity notice following reports of malicious activity by several vendors including Arctic Wolf and Huntress.

According to the researchers, they've observed a notable uptick in targeting of SonicWall Gen 7 firewalls with SSLVPN enabled. Based on their observations, it appears that attackers may be utilizing a possible zero-day vulnerability against these devices. So far, the attacks appear to be centered around deployment of the Akira ransomware.

SonicWall is currently investigating these reports. No patches and no CVE have been assigned as of yet.

For more information about the possible zero-day vulnerability, including the future availability of patches and Tenable product coverage, please visit our blog.