Government cybersecurity authorities have confirmed that hackers are actively exploiting flaws in several widely used business tools, including SonicWall's SMA 1000 series remote access appliances.

• What it is: The US Cybersecurity and Infrastructure Security Agency (CISA) has added seven vulnerabilities to its list of flaws confirmed to be under active attack, including bugs in SonicWall SMA 1000 remote access appliances, JFrog Artifactory, and Sangoma Switchvox phone systems.
• Who is affected: Any business running SonicWall SMA 1000 appliances for VPN or remote access, JFrog Artifactory for software development, or Sangoma Switchvox VoIP phone systems.
• What the risk is: Attackers are using these flaws to gain administrator access, install cryptocurrency mining malware, and open reverse shells for ongoing access to affected networks.
• What action is needed: Apply the vendor security patches immediately if your business runs any of these products. If you are unsure whether you use SonicWall SMA 1000 appliances, check with your IT provider.

If you use SonicWall for remote access, we recommend getting this patched today, as delaying increases your exposure.