SonicWall confirmed that a state-sponsored threat actor accessed firewall configuration backups from its cloud service via an API call, affecting all users of the service. Initially believed to impact less than 5% of customers, the breach was later found to be more extensive, exposing encrypted credentials and configuration data. The company emphasized that no products, firmware, or customer networks were compromised and has implemented all remediation steps recommended by Mandiant.

Read more:

https://www.securityweek.com/state-sponsored-hackers-stole-sonicwall-cloud-backups-in-recent-attack/