🛡️ **BREAKING/DEVELOPING — UK Council Hit in Active SonicWall Zero-Day Exploitation Campaign**
Published Friday, September 11, 2026 at 05:10 AM PT BLUF: UK local authority targeted in confirmed attack exploiting zero-day flaws in SonicWall SMA 1000 appliances (CVE-2026-83549, CVE-2026-83548). Mass exploitation of these unpatched vulnerabilities is ongoing across customer base. ACTION: Isolate unpatched SMA 1000 appliances immediately; assume compromise if exposed during attack window. DETAILS SonicWall confirmed two critical zero-day vulnerabilities in SMA 1000 appliances under active exploitation; vulnerabilities may chain to enable full appliance compromise UK Council attack confirms threat actors are pivoting from reconnaissance to operational targeting; incident represents real-world impact, not theoretical risk INC Ransomware gang actively targeting SonicWall customers; Russian military intelligence (per UK NCSC advisory) separately hijacking vulnerable routers for cyber operations SMA 1000 product line faces sustained exploitation; current campaign follows pattern of repeated SonicWall targeting over months Exploitation appears widespread; “mass exploitation” language used across multiple sources, indicating global customer base at risk IMPACT ...