Zero-Day Frenzy: SonicWall Chains, AI Hacks Hugging Face, and Healthcare Breaches Mount

SonicWall is urging customers to patch two new zero-day vulnerabilities in its SMA 1000 series VPN appliances that are being actively chained by attackers for unauthenticated remote code execution. The flaws, CVE-2026-83548 (CVSS 10.0) and CVE-2026-83549 (CVSS 7.8), allow a pre-authentication SSRF bug to chain with a post-authentication command injection, potentially handing attackers full control of affected devices. This marks the second time in roughly a month that...