SonicWall warns of actively exploited SMA1000 zero-day flaws

A BleepingComputer security-news feed reports active exploitation of multiple zero-day and recently patched vulnerabilities, including SonicWall SMA1000 and PaperCut flaws, plus exploitation of CVE-2026-0768 in Langflow to steal cloud and AI credentials. Other incidents include malicious Virtualizor updates delivered through BGP hijacking, phishing abuse of Faronics Deploy to install ScreenConnect, Microsoft Exchange exposure to mailbox-hijacking attacks, ClickFix/TerminalFix social engineering, router compromise, major healthcare data breaches, ATM jackpotting, and a $74 million DeFi exploit.