Huntress warns about attack spree that hit 30 SonicWall customers in 2 days

Huntress observed a rapid credential-stuffing campaign against SonicWall remote access portals that compromised 92 accounts across 30 organizations in under two days; the intrusions used valid logins (likely from aggregated stolen credentials or past compromises), no follow-on activity has yet been observed, and the report highlights prior SonicWall configuration thefts and exploited zero-days that elevate broader risk to edge devices and remote access infrastructure.