SonicWall - Malwlab

Podcast

Cyber Briefing (2026-08-05): INC Ransomware SonicWall SMA zero-day at scale, Langflow RCE on KEV, cPanel SQL-root escalation

INC Ransomware claims 885 victims on SonicWall SMA 1000 zero-days CVE-2026-15409/15410 with TOTP seed theft. CISA adds Langflow CVE-2026-9198 RCE to KEV. cPanel CVE-2026-58048 (CVSS 9.4) SQL-root escalation.

Podcast

Cyber Briefing Weekly (2026-08-10): INC SonicWall TOTP theft, ChainDrop npm worm, RufRoot AI-agent hijack, NatJack

INC Ransomware hits 900+ victims via SonicWall SMA 1000 zero-days. npm worm ChainDrop poisoned 444+ packages with Ethereum C2 rotation. CVE-2026-59726 leaves Ruflo's MCP bridge unauthed (CVSS 10.0). Plus: TeamCity under BOD in latest KEV batch; NatJack NAT trust exploits.

SonicWall

SonicWall SMA1000: active exploitation of CVE-2026-15409 and CVE-2026-15410

SonicWall confirms active exploitation of CVE-2026-15409 and CVE-2026-15410 in SMA1000 appliances. Fixed versions, indicators, and response steps.