Cybersecurity

SonicWall SMA Flaws Lead to KNUCKLEBALL Malware

50 sec read4 views0 listens

Summary of SonicWall SMA Vulnerabilities (CVE-2026-15409 and CVE-2026-15410)

Overview:

SonicWall recently disclosed two critical vulnerabilities affecting their Secure Mobile Access (SMA) appliances. These vulnerabilities, CVE-2026-15409 and CVE-2026-15410, are classified as high severity due to the potential for remote code execution without authentication. Both vulnerabilities have been actively exploited by threat actors since May 2023.

Details:

Vulnerability Type: Remote Code Execution (RCE)
Severity Level: High
Exploitation Status: Actively Exploited

Impact and Threat Actor Activity:

Initial Compromise:
- Attackers exploited the vulnerabilities to gain root access on affected SMA appliances.
- The attack vectors involved exploiting unpatched SMA versions, leading to full control over the devices.
Post-Compromise Activities:
- Once compromised, attackers used SMA appliances as internal footholds.
- They engaged in credential gathering and traffic capture activities.
- Mal

Read the full article at SOCRadar-? Cyber Intelligence Inc.

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.

Kentucky Couple Targeted in Tiny Home Heist: 5 Key Takeaways

A custom 26-foot tiny home was recently stolen from a Kentucky property after thieves bypassed hitch locks and towed the structure away. This theft highlights a growing security gap in the mobile housing sector, necessitating that developers integrat...

Ali Nemati

CybersecurityJun 931 sec read

New MagicAd Android Malware Flood Device With Ads Bypassing Restrictions

The MagicAd Android trojan has infected over 50 apps on the Xiaomi GetApps store, using creative techniques like translucent activities and system intent relays to bypass ad restrictions. The malware persists by using task schedulers and hidden audio...

Ali Nemati

CybersecurityJun 929 sec read

New Weedhack Malware-as-a-Service Targets Minecraft Players to Steal Credentials, and Hijack Accounts

Weedhack has emerged as a Minecraft-focused Malware-as-a-Service platform that exploits game modifications to steal credentials and hijack accounts using trojanized Java Archive files. This development is significant for cybersecurity professionals b...

Ali Nemati

CybersecurityJun 310 sec read

Coinbasecartel Targets Cambridge Mobile Telematics in Ransomware Attack

Unknown command: /no_think Read the full article at Malware Analysis, News and Indicators - Latest topics Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more....

Ali Nemati

CybersecurityJun 228 sec read

Android 0-Day Vulnerability Exploited in Attacks to Gain Complete Device Control

A critical Android zero-day vulnerability, CVE-2025-48595, is being actively exploited to grant attackers near-complete device control without user interaction. This elevation-of-privilege flaw poses a significant risk to users of Android 14, 15, and...

Ali Nemati

SonicWall SMA Flaws Lead to KNUCKLEBALL Malware

Summary of SonicWall SMA Vulnerabilities (CVE-2026-15409 and CVE-2026-15410)

Overview:

Details:

Impact and Threat Actor Activity:

Related Articles

Kentucky Couple Targeted in Tiny Home Heist: 5 Key Takeaways

New MagicAd Android Malware Flood Device With Ads Bypassing Restrictions

New Weedhack Malware-as-a-Service Targets Minecraft Players to Steal Credentials, and Hijack Accounts

Coinbasecartel Targets Cambridge Mobile Telematics in Ransomware Attack

Android 0-Day Vulnerability Exploited in Attacks to Gain Complete Device Control