Exploitation of two vulnerabilities in SonicWall's SMA1000 device has been confirmed by the Cybersecurity and Infrastructure Security Agency (CISA), with ransomware groups leveraging these flaws to launch attacks. A server-side request forgery (SSRF) vulnerability, in particular, poses a significant threat due to its maximum-severity rating. The SMA1000 vulnerabilities, which were recently patched, are now being exploited by ransomware gangs, highlighting the importance of prompt patching and robust security measures. CISA's confirmation of these exploits underscores the need for organizations to prioritize operational resilience planning, especially in sectors that are frequently targeted by ransomware groups1. The fact that ransomware gangs are actively exploiting these vulnerabilities emphasizes the potential for significant disruption to operations, making it crucial for practitioners to take proactive measures to secure their systems and protect against such threats.