SonicWall: state actor stole firewall config backups of every cloud-backup customer ยท updates https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025 SonicWall and Mandiant confirmed that a state-sponsored actor used an API call to pull firewall configuration backup files for all customers using MySonicWall cloud backup, after first saying fewer than 5% were affected. The files include credentials and network details, so customers had to reset firewall, VPN, directory and API secrets. en Sat, 01 Nov 2025 00:00:00 GMT SonicWall: state actor stole firewall config backups of every cloud-backup customer: SonicWall says the investigation is complete and attributes it to a state-sponsored actor https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025 https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025#2025-11-f3ae410a Sat, 01 Nov 2025 00:00:00 GMT high <p><a href="https://www.sonicwall.com/blog/cloud-backup-security-incident-investigation-complete-and-strengthened-cyber-resilience">Source</a></p> SonicWall: state actor stole firewall config backups of every cloud-backup customer: SonicWall and Mandiant confirm all cloud-backup customers' files were accessed https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025 https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025#2025-10-08-2ebe43c8 Wed, 08 Oct 2025 00:00:00 GMT high <p><a href="https://www.bleepingcomputer.com/news/security/sonicwall-firewall-configs-stolen-for-all-cloud-backup-customers/">Source</a></p> SonicWall: state actor stole firewall config backups of every cloud-backup customer: SonicWall discloses unauthorized access to cloud backup files (initially <5% of customers) https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025 https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025#2025-09-17-4a785e07 Wed, 17 Sep 2025 00:00:00 GMT high <p><a href="https://www.sonicwall.com/support/notices/mysonicwall-cloud-backup-file-incident/kA1VN0000000RoD0AU">Source</a></p>