SonicWall breach linked to state-backed threat actors

SonicWall has attributed the cyberattack against MySonicWall accounts that exposed certain firewall backup files in September to a state-sponsored threat actor, according to Security Affairs.

No other SonicWall offerings, firmware, source code, tools, or customer networks were compromised as a result of the breach which is separate from the ongoing Akira ransomware intrusions against SonicWall devices, said the U.S. cybersecurity firm, which enlisted Mandiant researchers to investigate the incident. SonicWall has already moved to bolster its systems' security through recommendations provided by Mandiant as it called on organizations to promptly reset their passwords.

"As nation-statebacked threat actors increasingly target edge security providers, especially those serving SMB and distributed environments, SonicWall is committed to strengthening its position as a leader for partners and their SMB customers on the front lines of this escalation. Our platform strategy is already aligned to that future," said the company.