---
title: Akira Ransomware Targets SonicWall VPNs in Suspected Zero-Day Attack
description: Akira ransomware is exploiting SonicWall SSL VPN devices in a suspected zero-day attack, breaching fully-patched systems and exposing a new vulnerability. Organizations using SonicWall VPNs are at immediate risk.
canonical_url: https://codekeeper.co/ticker/akira-ransomware-targets-sonicwall-vpns-zero-day
---

[Ransomware](https://codekeeper.co/ticker/tag/ransomware)

# Akira Ransomware Targets SonicWall VPNs in Suspected Zero-Day Attack

Akira ransomware is exploiting SonicWall SSL VPN devices in a suspected zero-day attack, breaching fully-patched systems and exposing a new vulnerability. Organizations using SonicWall VPNs are at immediate risk.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Aug 2, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Cybercriminals behind Akira ransomware are exploiting SonicWall SSL VPN devices in what appears to be a zero-day attack, successfully breaching fully-patched systems. The attacks target organizations using SonicWall's VPN infrastructure, raising serious concerns about a previously unknown vulnerability. Since the compromised devices were up-to-date with security patches, security experts suspect attackers discovered and weaponized a new flaw before SonicWall could address it. Organizations using SonicWall VPNs face immediate risk and should monitor their networks closely for suspicious activity while awaiting official patches. **Source:** [The Hacker News](https://thehackernews.com/2025/08/akira-ransomware-exploits-sonicwall.html)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fakira-ransomware-targets-sonicwall-vpns-zero-day%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Nation-State iPhone Exploit Chains Coruna and DarkSword Are Now in Cybercriminals' Hands Aug 11, 2026](https://codekeeper.co/ticker/darksword-coruna-iphone-exploit-chains)

[Vulnerabilities Unpatched Steam Flaw Gives Local Windows Users SYSTEM Access Sep 18, 2026](https://codekeeper.co/ticker/steam-zero-day-escalation-risk)

[North Korea Used Obscure npm Package as a Dress Rehearsal Before the Axios Hack Aug 11, 2026](https://codekeeper.co/ticker/north-korean-hackers-target-npm-packages)

[Android Zero-Day Bug Hands Attackers Near-Total Device Control Aug 12, 2026](https://codekeeper.co/ticker/android-zero-day-vulnerability-cve-2025-48595)