SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances

Security news covering multiple critical vulnerabilities, active exploitation, malware campaigns, and major security incidents. Key risks include a CVSS 10 pre-authentication SSRF in SonicWall SMA1000 appliances, the FortiBleed credential-harvesting campaign compromising more than 86,000 Fortinet devices, ClickFix-based LunexStealer delivery, Microsoft Exchange privilege escalation, a Dell DSU path-traversal flaw enabling root access, and in-the-wild exploitation of a critical Rejetto HFS authentication-bypass/RCE vulnerability.