SonicWall firewalls targeted by fresh Akira ransomware surge

Researchers and authorities report a rise in Akira ransomware attacks exploiting SonicWall SSL VPN vulnerability CVE-2024-40766 and common device misconfigurations; Rapid7, CISA, and the Australian Cyber Security Centre have observed multiple waves of exploitation where attackers leverage patched-but-misconfigured devices, unchanged passwords after migration, and LDAP overprovisioning to gain initial access and deploy ransomware.