Skip to content
[CVE-2026-15409] UK Council Attack Linked to SonicWall SMA 1000 Campaign
hunt.io | vulnerability | CVE-2026-15409 | #incident-response | #threat-intelligence | #active-directory | #impacket | #sonicwall | #dcsync | #cve-2026-15409
Summary
Hunt.io links a UK council breach to mass exploitation of SonicWall SMA1000 CVE-2026-15409: LDAP credentials from 168 appliances, secretsdump run on-device, DCSync in five AD environments.
- Published
- Collected