Cybersecurity · 46 views
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
Volexity links UTA0533 to two SonicWall SMA 1000 zero-days used before disclosure to gain root, plant malware, and capture LDAP credentials.
Summary
A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026. Cybersecurity company Volexity is tracking the activity under the moniker UTA0533.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Maritime Coalition Launches Free Vulnerability Database for Ship and Port SystemsContinue reading
- Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth WeaknessesContinue reading
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionContinue reading
- OpenAI’s August fix for theft of reasoning traces was quickly bypassedContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow