Ransomware Group Targets SonicWall Gen 7 Firewalls via CVE-2024-40766

In June 2026 threat actors have actively exploited SonicWall Gen 7 firewalls using CVE-2024-40766 to gain unauthorized access—frequently during Gen 6→Gen 7 migrations where local passwords were not reset—and have deployed Akira ransomware after entering networks via SSL VPNs; security vendors advise resetting local user passwords and updating firmware to mitigate rapid, often domain-controller-directed lateral movement.