22 days inside: the SonicWall SMA 1000 zero-days and why the perimeter VPN is no longer the defense — it's the target
Zero-days CVE-2026-15409 and CVE-2026-15410 were exploited from June 22, 22 days before the patch, with theft of credentials and MFA seeds. Why the VPN appliance is the perfect target and what to do beyond patching.