SonicWall: 100% of Firewall Backups Were Breached

SonicWall disclosed that attackers accessed encrypted credentials and firewall configuration backup files stored in its cloud backup service; an initial estimate that fewer than 5% of customers were affected was revised to all customers who used the service. SonicWall, working with Mandiant, completed an investigation, released remediation guidance and tools, and advises affected customers to rotate passwords/keys and check devices, noting no confirmed follow-on attacks to date.