Huntress Threat Advisory: Active Exploitation of SonicWall VPNs
Aug 4, 2025
Be the first to know about CVEs and threat advisories that we're seeing on the front lines. We'll break down how these threats or attacks work, do in-depth analysis, and provide mitigation guidance.
Huntress Threat Advisory: Active Exploitation of SonicWall VPNs
Rapid Response: Samsung MagicINFO 9 Server Flaw
CVE-2025-30406 - Critical Gladinet CentreStack & Triofox Vulnerability Exploited In The Wild
CrushFTP CVE-2025-31161 Auth Bypass and Post-Exploitation
SlashAndGrab: The ConnectWise ScreenConnect Vulnerability Explained
Oh No Cleo! Malichus Implant Malware Analysis
Threat Advisory: Oh No Cleo! Cleo Software Actively Being Exploited in the Wild
Cracks in the Foundation: Intrusions of FOUNDATION Accounting Software
SlashAndGrab: The ConnectWise ScreenConnect Vulnerability Explained
SlashAndGrab: ScreenConnect Post-Exploitation in the Wild (CVE-2024-1709 & CVE-2024-1708)
Think Your ScreenConnect Server Is Hacked? Here’s What To Look For.
A Catastrophe For Control: Understanding the ScreenConnect Authentication Bypass (CVE-2024-1709 & CVE-2024-1708)
Detection Guidance for ConnectWise CVE-2024-1709
Vulnerability Reproduced: Immediately Patch ScreenConnect 23.9.8
Critical Vulnerability: SysAid CVE-2023-47246
