SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
2026-11-07T13:23:22Z•d78e96589d55eaa2f57274291cd8ebf3c4f70b71ad63a346218708e9d672fe8a
AI securityAPI keysD-LinkGitHub supply chainLinuxMFA bypassOpenSSHPlex2ShellQNAPSSL-VPNSonicWallactive exploitationauthentication bypassbackdoorcloud securitycredential theftdata breachexposed secretsindustrial control systemsinfostealernetwork appliancesphishingrefrigeration systemszero-day
What happened
A BleepingComputer security-news feed covering actively exploited vulnerabilities, zero-days, breaches, malware campaigns, phishing operations, industrial-control-system targeting, exposed secrets, and an OpenSSH authentication bypass affecting certain musl-based Linux systems. The most urgent items include a SonicWall SSL-VPN MFA bypass exploited in attacks, QNAP devices compromised through Plex2Shell, D-Link switch zero-days, and cyberattacks targeting industrial refrigeration systems.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- d78e96589d55eaa2f57274291cd8ebf3c4f70b71ad63a346218708e9d672fe8a
- Enrichment time
- 2026-11-07T13:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.