SonicWall firewall devices hit in surge of Akira ransomware attacks

**SonicWall devices targeted in Akira ransomware surge:** Arctic Wolf reports multiple intrusions beginning mid-July that abused SonicWall SSL VPN access to deploy Akira ransomware (and related OVERSTEP activity against SMA 100 appliances), potentially leveraging a zero-day while credential-based attacks remain possible; Arctic Wolf and SonicWall published IOCs, mitigation advice (disable SSL VPN, enhance logging/monitoring, block hosting-provider auth), and SonicWall alerted to CVE-2025-40599 affecting SMA 100 appliances.