SonicWall Patches Two New Actively Exploited Zero-Days in SMA 1000 VPNs

Security Affairs reports active exploitation and disclosure of multiple critical vulnerabilities and threats, including SonicWall SMA 1000 zero-days, unauthenticated remote code execution in Langflow (CVE-2026-0768), and actively exploited PaperCut NG/MF flaws added to CISA's KEV catalog. The feed also covers malware delivery by Iran-linked Mirage Kitten, DPRK-linked insider infiltration, cloud data exposure affecting 9.5 million people, privilege-escalation zero-day exploit releases targeting Avast and Kaspersky products, AI-assisted PLC exploitation, and ATM jackpotting.