Cyber Security Headlines SonicWall VPM exploits, Fed cyberchief’s priorities, U.S spyware investment triples
16 snips
Sep 12, 2025 SonicWall SSL VPN vulnerabilities are now being actively exploited, raising alarms for organizations everywhere. The Acting Federal Cyber Chief shared crucial priorities to strengthen cyber defenses amidst a surge in U.S. investments in spyware firms. Meanwhile, the UK struggles with delayed cybersecurity legislation despite growing threats, highlighted by attacks on major companies like Jaguar Land Rover. Emerging threats also loom large, with file-less malware campaigns and new attack vectors like VMscape posing serious risks to cloud security.
AI Snips
Chapters
Transcript
Episode notes
SonicWall Exploits Spike
- SonicWall appliances are being actively exploited following renewed Akira ransomware activity.
- Rapid7 and SonicWall link attacks to a year-old high-severity flaw where migrated local passwords were not reset.
Prioritize Enterprise-Wide Defenses
- Act now on enterprise-wide vulnerability management, supply chain, and incident response.
- Michael Duffy urges agencies to implement defenses proactively instead of waiting for the next crisis.
U.S. Spyware Investment Surge
- U.S. investor involvement in spyware manufacturers surged in 2024, nearly tripling from 2023.
- The report names U.S. firms as the largest investors and cites specific acquisitions and investments like Paragon and Saito Tech.