Akira Ransomware Operators Exploit SonicWall SSL VPN Flaw and Misconfigurations
Threat actors linked to the Akira ransomware group are actively exploiting SonicWall devices to gain initial access, with a sharp rise in intrusions observed since late July 2025. Cybersecurity firm Rapid7 reported a noticeable spike in incidents involving SonicWall appliances during this period, coinciding with renewed Akira activity. SonicWall confirmed