Post by The Hacker News

🚨 Two SonicWall SMA 1000 zero-days were exploited before disclosure to gain root access. Researchers link the activity to UTA0533, which planted custom malware and sniffed unencrypted LDAP credentials from compromised VPN appliances. Full attack chain: https://lnkd.in/gCYCdF2N