zero-day

Two SonicWall SMA 1000 zero-days are under active attack. Here is what CVE-2026-15409 and CVE-2026-15410 let an attacker do, and what to patch first.

CVE-2026-50751’s root cause — a gateway that let clients disable their own certificate verification — reflects a wider design failure. Here’s what it means for how organisations should think about …