SonicWall SMA1000 flaws exploited as zero-days to push custom malware

Two vulnerabilities in SonicWall SMA1000 were exploited in zero-day attacks for weeks, enabling threat actors to install custom malware on vulnerable VPN appliances. The flaws were recently disclosed but were used before patches were available.