CISA Adds SonicWall and Fancy Bear Resurfaces with Zero-Day Targeting Windows Defenders

News

CISA Adds SonicWall SMA100 Vulnerabilities to Known Exploited Vulnerabilities Catalog

CISA added multiple SonicWall SMA100 series flaws to the KEV catalog, signaling active exploitation in the wild. If you have SonicWall remote access appliances exposed, patching is not optional right now.

Analysis

APT28 (Fancy Bear) Exploiting Windows Zero-Day to Target Government Networks

Russia's APT28 is weaponizing an unpatched Windows privilege escalation flaw against government and defense sector targets. This is a high-priority patch-or-mitigate situation, especially for orgs in sectors that match typical Russian espionage targeting.

Tools

ProjectDiscovery Nuclei Templates Updated With New CVE Detection Coverage

Fresh Nuclei templates dropped covering several recently disclosed CVEs including SonicWall and GitLab flaws. Pull the latest templates now if you're running automated scanning so your detection coverage stays current.