2026-10-13: SonicWall SMA 1000 devices are under active attack via CVE-2026-102255

Show Notes - 2026-10-13

Stories Covered: - Today: - SonicWall SMA 1000 SSRF Vulnerability (CVE-2026-102255) (https://www.darkreading.com/vulnerabilities-threats/max-severity-ssrf-flaw-sonicwall-sma-devices-under-attack) - GitLab Remote Code Execution (CVE-2026-97229) (https://thehackernews.com/2026/10/gitlab-patches-cvss-100-flaw-that-could.html) - CISA KEV Additions (https://research.checkpoint.com/2026/12th-october-threat-intelligence-report/) - Ransomware Negotiator Arrested on Extortion Charges (https://www.securityweek.com/ransomware-response-expert-arrested-in-shinyhunters-fbi-hack-probe/) - Empire Market Dark Web Founder Sentenced (https://databreaches.net/2026/10/12/co-creator-of-dark-web-marketplace-sentenced-to-40-years-in-federal-prison/) - European Supermarket Refrigeration Controllers Hijacked (https://www.securityweek.com/refrigeration-controller-hack-spoils-food-across-european-supermarkets/) - Ahold Delhaize Cyberattack Disrupts Operations (https://www.securityweek.com/cyberattack-prompts-ahold-delhaize-to-disconnect-systems/) - Fashion Retail Cyber Cluster (https://www.theregister.com/cyber-crime/2026/10/13/owner-of-fashion-brands-hobbs-and-whistles-joins-autumn-pwned-collection/5302752) - Low-Cost Android Phones Ship With Preinstalled Malware (https://thehackernews.com/2026/10/low-cost-android-phones-ship-with.html) - MarkLogic Critical Privilege Escalation Flaws (https://thehackernews.com/2026/10/two-critical-marklogic-flaws-could-give.html) - Atlassian Data Center File Access Vulnerability (CVE-2026-21589) (https://research.checkpoint.com/2026/12th-october-threat-intelligence-report/) - Veeam Backup & Replication RCE (CVE-2025-64393) (https://research.checkpoint.com/2026/12th-october-threat-intelligence-report/) - Cisco NX-OS Critical Flaws (https://research.checkpoint.com/2026/12th-october-threat-intelligence-report/) - Bricksforge WordPress Plugin (CVE-2026-85097) (https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/) - VMware HyperArmor Launches Amid Patch Flood (https://www.theregister.com/virtualization/2026/10/13/vmware-is-pushing-so-many-patches-it-thinks-users-need-new-tools-to-manage-the-flood-1/5302172) - Microsoft Exchange Admin Center Outage (https://www.theregister.com/saas/2026/10/12/microsoft-blames-a-configuration-change-for-exchange-admin-center-tumble/5302698) - Windows 11 Account Bypass Closed (https://www.theregister.com/os-platforms/2026/10/12/windows-11s-easiest-account-bypass-gets-the-microsoft-boot/5302643) - Ledger Hardware Wallet Tampering (https://thehackernews.com/2026/10/ledger-finds-unauthorized-hardware.html) - AI-Assisted Intrusion Campaign (ARTEX) (https://research.checkpoint.com/2026/12th-october-threat-intelligence-report/)

CVEs Referenced: CVE-2025-64393, CVE-2026-102255, CVE-2026-14814, CVE-2026-15409, CVE-2026-15410, CVE-2026-16301, CVE-2026-21589, CVE-2026-76455, CVE-2026-85097, CVE-2026-85706, CVE-2026-85947, CVE-2026-85948, CVE-2026-88779, CVE-2026-92883, CVE-2026-97229

Indicators of Compromise: IPs: 3.1.8.10

Full brief: https://carolinacleartech.com/brief/2026-10-13/