“The first driver, rwdrv.sys, is a legitimate driver for ThrottleStop. This Windows-based performance tuning and monitoring ...

SonicWall says that recent Akira ransomware attacks exploiting Gen 7 firewalls with SSLVPN enabled are exploiting an older ...

This is done by exploiting a vulnerable driver called rwdrv.sys, which is a legitimate driver used by an Intel CPU tuning ...

Huntress said it detected around 20 different attacks tied to the latest attack wave starting on July 25, 2025, with ...

Cybersecurity experts are sounding the alarm. The Akira ransomware is apparently once again exploiting vulnerabilities in ...

Akira ransomware exploits SonicWall SSL VPNs, hitting patched devices. Organizations face risks from possible zero-day flaw.

Just sloppy setups and sneaky driversSonicWall walks back zero‑day fears, addresses credential reuse—and now driver-based evasion—in Gen 7 and newer VPN attacks What first looked like a zero-day ...

Threat researchers at GuidePoint Security have uncovered Akira affiliates abusing legitimate Windows drivers in a previously ...

SonicWall firewall devices have been increasingly targeted since late July in a surge of Akira ransomware attacks, ...

As of mid-July this year, cybersecurity researchers Arctic Wolf Labs observed an uptick in malicious logins, all coming ...

In all of the cases observed by the security vendor, threat actors achieved VPN access through SonicWall SSL VPNs. There then ...

SonicWall on Monday confirmed that it's investigating a rash of ransomware activity targeting its firewall devices, following ...