SonicWall has revealed that the recent spike in activity targeting its Gen 7 and newer firewalls with SSL VPN enabled is related to an older, now-patched bug and password reuse.
« We now have high confidence that the recent SSL VPN activity is not connected to a zero-day vulnerability, » the company said. « Instead, there is a significant correlation with threat activity related to CVE-2024-40766. »