Sonicwall said that hackers are using new zero -day errors to violate the customer network
Sonicwall said that hackers are using the vulnerabilities newly discovered in its company's products to break into its customer's company's network.
Sonicwall said in the proposal that the vulnerability in its SMA1000 remote access device is that the company's vulnerability used to allow its employees to log in to its company's network needs to be systematically logged in.
Microsoft discovered the vulnerability, which was tracked as CVE-2025-23006 and shared with SonicWall. Sonicwall said in the subsequent support post that the vulnerability was “confirmed to be actively used in the wild”, which shows that some company customers of Sonicwall have been hacked by hackers. The error is called 0. One day because it is used before SonicWall has time to provide customers before providing solutions.
When TechCrunch is contacted with TechCrunch, neither Sonicwall nor Microsoft said that how many companies were compromised in the attack, but urged customers to repair the affected systems by installing the Security Hotfix released by Sonicwall later.
According to the SHODAN search results, there are thousands of SMA 1000 electrical computers shared by computer sharing, which makes many companies with unpacking systems greater.
Malicious hackers are increasingly targeting company network security products, such as firewalls, remote access tools and VPN products. These devices exist around the company's network to prevent access to invaders and unauthorized access. However, they also tend to include software errors that can make their security protection ineffective, so that hackers can compromise the networks that are responsible for protection.
In recent years, some of the largest manufacturers of some company network security products, including barracuda, checkpoints, Cisco, Citrix, Fortinet, Ivanti and Palo Alto Networks. Network compromise.
According to CISA, the US Cyber Security Agency, found the most conventional vulnerabilities in 2023 in corporate products developed by Citrix, Cisco and Fortinet, and was used by hackers to operate with “high advantage goals”.