Maximum-severity SonicWall flaw is now under active exploitation.

This briefing summarizes multiple active cybersecurity incidents: a maximum-severity CVE in SonicWall SMA1000 appliances now being exploited in the wild; the FBI removing a contractor after a ShinyHunters data breach exposing thousands of employees; the DOJ seizing domains tied to China-aligned Flax Typhoon for Microscan and FishHub operations targeting critical infrastructure and universities; suspected hacker access to an oil tanker’s propulsion systems under US investigation; and the indictment of a ransomware recovery firm CEO accused of secretly paying attackers and defrauding victims.