SonicWall warns customers to reset credentials after MySonicWall breach

SonicWall has issued a critical security warning urging all MySonicWall users to reset their account credentials following a recent data breach. The breach exposed customer information, prompting immediate action to secure accounts and prevent unauthorized access. SonicWall's security team detected the intrusion and responded swiftly to mitigate potential damage. Customers are advised to change passwords and enable multi-factor authentication to enhance account security. This incident highlights the growing threat landscape targeting VPN and network security providers, emphasizing the need for robust cybersecurity measures. Organizations relying on SonicWall products should review their security protocols and monitor for suspicious activity. The breach serves as a reminder of the importance of proactive cybersecurity hygiene and timely response to security incidents. SonicWall continues to investigate the breach and collaborate with cybersecurity experts to strengthen defenses and protect user data.

This Cyber News was published on www.bleepingcomputer.com. Publication date: Wed, 17 Sep 2025 16:25:42 +0000


Cyber News related to SonicWall warns customers to reset credentials after MySonicWall breach

SonicWall warns customers to reset credentials after MySonicWall breach - SonicWall has issued a critical security warning urging all MySonicWall users to reset their account credentials following a recent data breach. The breach exposed customer information, prompting immediate action to secure accounts and prevent ...
3 months ago Bleepingcomputer.com
SonicWall SMA1000 Vulnerability Let Attackers to Exploit Encoded URLs To Gain Internal Systems Access Remotely - SonicWall has issued a high-priority security advisory (SNWLID-2025-0010) revealing a critical Server-Side Request Forgery (SSRF) vulnerability in its SMA1000 Appliance Work Place interface. Discovered by security researcher Ronan Kervella of ...
7 months ago Cybersecuritynews.com
Over 178K SonicWall firewalls vulnerable to DoS, potential RCE attacks - Security researchers have found over 178,000 SonicWall next-generation firewalls with the management interface exposed online are vulnerable to denial-of-service and potential remote code execution attacks. These appliances are affected by two DoS ...
1 year ago Bleepingcomputer.com CVE-2022-22274 CVE-2023-0656
Analyzing the SonicWall Custom Grub LUKS Encryption Modifications - During our initial analysis of a virtual machine image for the application, we discovered a customized LUKS encryption mechanism meant to hinder reverse engineering of the application. We were able to recover the LUKS decryption key by leveraging ...
2 years ago Securityboulevard.com
Tech Security Year in Review - In this Tech Security Year in Review for 2023, let's look into the top data breaches of the past year. Each factor contributes to the growing threatscape, demanding a proactive and adaptable cybersecurity approach to safeguard your organization ...
2 years ago Securityboulevard.com
178K+ SonicWall Firewalls Vulnerable to DoS, RCE Attacks - Two unauthenticated denial-of-service vulnerabilities are threatening the security of SonicWall next-generation firewall devices, exposing more than 178,000 of them to both DoS as well as remote code execution attacks. SonicWall products affected are ...
1 year ago Darkreading.com CVE-2022-22274 CVE-2023-0656
FCC orders telecom carriers to report PII data breaches within 30 days - Starting March 13th, telecommunications companies must report data breaches impacting customers' personally identifiable information within 30 days, as required by FCC's updated data breach reporting requirements. FCC's final rule follows several ...
1 year ago Bleepingcomputer.com
Data Breach Response: A Step-by-Step Guide - In today's interconnected world, organizations must be prepared to respond swiftly and effectively in the face of a data breach. To navigate these challenges, a well-defined and comprehensive data breach response plan is essential. Let's explore the ...
1 year ago Securityzap.com
SonicWall Accelerates SASE Offerings; Acquires Proven Cloud Security Provider - PRESS RELEASE. MILPITAS, Calif. - January 3, 2024 - SonicWall, a global cybersecurity leader, today announced the acquisition of Banyan Security, a leading provider of security service edge solutions for the modern workforce. This acquisition ...
2 years ago Darkreading.com
SonicWall Confirms That Hackers Stole Encrypted Customer Data in 2021 Breach - In late 2021, SonicWall, a prominent cybersecurity company, confirmed that hackers successfully stole encrypted customer data during a significant breach. This incident has raised concerns about the security of encrypted data and the methods threat ...
3 months ago Cybersecuritynews.com CVE-2021-20016 UNC2447
SonicWall says state-sponsored hackers behind security breach in September - In September 2023, SonicWall, a prominent cybersecurity company, disclosed a significant security breach attributed to state-sponsored hackers. The attackers exploited vulnerabilities in SonicWall's secure remote access products, impacting thousands ...
2 months ago Bleepingcomputer.com CVE-2023-3519 CVE-2023-3520 State-sponsored hackers
SonicWall urges admins to patch critical RCE flaw in SMA 100 devices - While attackers would need admin privileges for CVE-2025-40599 successful exploitation and SonicWall has yet to find evidence that this vulnerability is being actively exploited, it still warned customers to secure their devices, as SMA 100 ...
5 months ago Bleepingcomputer.com CVE-2025-40599
Why CISA is Warning CISOs About a Breach at Sisense - The U.S. Cybersecurity and Infrastructure Security Agency said today it is investigating a breach at business intelligence company Sisense, whose products are designed to allow companies to view the status of multiple third-party online services in a ...
1 year ago Krebsonsecurity.com
CISA discloses Sisense breach, customer data compromised - CISA disclosed a breach at Sisense and urged users to reset their credentials, but the data analytics vendor has not yet publicly addressed the incident. In an alert on Thursday, CISA revealed it's working with private partners to investigate a ...
1 year ago Techtarget.com
Ticketmaster confirms massive breach after stolen data for sale online - Live Nation has confirmed that Ticketmaster suffered a data breach after its data was stolen from a third-party cloud database provider, which is believed to be Snowflake. While the breach has allegedly exposed the data of over 560 million ...
1 year ago Bleepingcomputer.com Hunters
Mr. Cooper breach affects more than 14.6M - Mr. Cooper, a major U.S. mortgage servicer, says an October data breach affected nearly 14.7 million people, including all its current and former customers. Mr. Cooper provided a data breach notification to the Office of the Maine Attorney General ...
2 years ago Packetstormsecurity.com
Identity Crisis: 14 Million Individuals at Risk After Mortgage Lender's Data Breach - Mr Cooper, the private mortgage lender, has now admitted almost 14.7 million individuals' private data has been stolen in a previous IT security breach, which resulted in the theft of their addresses and bank account numbers, but it is estimated the ...
2 years ago Cysecurity.news Meow
SonicWall OS Command Injection Vulnerability Exploited in the Wild - “During further analysis, SonicWall and trusted security partners identified that ‘CVE-2023-44221 – Post Authentication OS Command Injection’ vulnerability is potentially being exploited in the wild,” SonicWall stated in ...
8 months ago Cybersecuritynews.com CVE-2023-44221
178,000 SonicWall firewalls are vulnerable to old DoS bugs The Register - More than 178,000 SonicWall firewalls are still vulnerable to years-old vulnerabilities, an infosec reseacher claims. A study by Jon Williams, senior security engineer at Bishop Fox, this week highlights what he refers to as weapons-grade patch ...
1 year ago Go.theregister.com CVE-2022-22274 CVE-2023-0656
EasyPark discloses data breach that may impact millions of users - Parking app developer EasyPark has published a notice on its website warning of a data breach it discovered on December 10, 2023, which impacts an unknown number of its millions of users. EasyPark is a Swedish company that creates mobile and web apps ...
2 years ago Bleepingcomputer.com
SonicWall Firewall Authentication Bypass Vulnerability Exploited in Wild - The surge in attacks follows the public release of proof-of-concept (PoC) exploit code on February 10, 2025, by researchers at Bishop Fox, amplifying risks for organizations with unpatched devices. Security analysts attribute the rapid weaponization ...
10 months ago Cybersecuritynews.com CVE-2024-53704 Akira
Banco Santander warns of a data breach exposing customer info - Banco Santander S.A. announced it suffered a data breach impacting customers after an unauthorized actor accessed a database hosted by one of its third-party service providers. With a strong presence in Spain, the United Kingdom, Brazil, Mexico, and ...
1 year ago Bleepingcomputer.com
180k Internet-Exposed SonicWall Firewalls Vulnerable to DoS Attacks, Possibly RCE - The majority of internet-exposed SonicWall next-generation firewall series 6 and 7 devices have not been patched against two potentially serious vulnerabilities, cybersecurity firm Bishop Fox reports. The issues, tracked as CVE-2022-22274 and ...
1 year ago Securityweek.com CVE-2022-22274 CVE-2023-0656
T-Mobile Data Breach Affects 37 Million Customers: What You Should Know - T-Mobile recently announced that a data breach of its API had impacted the personal records of over 37 million customers. The breach occurred on the T-Mobile website, and could have allowed unauthorized users to access customer data such as name, ...
2 years ago Heimdalsecurity.com
SonicWall Alerts that Web Content Filtering is Not Working Properly on Windows 11 22H2 - Today, security hardware manufacturer SonicWall alerted customers of a limitation of the web content filtering feature on Windows 11, version 22H2 systems. SonicWall's Capture Client is a security solution for Windows and macOS that has Endpoint ...
2 years ago Bleepingcomputer.com