New VPN Attack Warning — What You Need To Know
VPN Security Has A History Of Compromise
Let's get the virtual elephant out of the private networking room before moving on to the latest VPN warning. A VPN app, far from being a security silver bullet, can actually just be an extension of your threat surface. How many examples would you like me to provide as evidence of this? I'll throw Google's warning about a backdoor bundled with a free VPN app into the ring for starters, or how about the FBI warning concerning Medusa ransomware compromising VPN credentials? One more? OK, the recent Katz Stealer warning as this threat also targeted VPN credentials.
The latest VPN security warning comes from Julian Tuin, a senior threat intelligence researcher at Arctic Wolf Labs, who has confirmed that 'an increase in ransomware activity targeting SonicWall firewall devices for initial access,' has been observed late in July. More specifically, Tuin said, 'multiple pre-ransomware intrusions were observed within a short period of time, each involving VPN access through SonicWall SSL VPNs.'
While there can, and should, be questions asked as to whether these attacks could have occurred thanks to brute force or credential stuffing methods in at least some cases, Tuin warned that the 'available evidence points to the existence of a zero-day vulnerability.' Not least as some of the SonicWall devices were fully security patched and had also had credential rotation applied before the attacks took place. 'Despite TOTP MFA being enabled,' Tuin said, 'accounts were still compromised in some instances.'
I have reached out to SonicWall for a statement and will update this article in due course.
Mitigating The Potential For VPN Attack
Given that the Artic Wolf report revolves around a spike in attacks involving the Akira Ransomware group, known to have compromised more than 300 organizations and with some very high-profile names published to the hacker's data leak site listings, the threat should not be taken lightly. Throw in the fact that SonicWall only recently issued a warning regarding the CVE-2025-40599 vulnerability in SMA 100 appliances, which could see remote code execution if successful, and you would be foolish not to at least mitigate against the potential of attacks.
'Given the high likelihood of a zero-day vulnerability,' Tuin said, 'organizations should consider disabling the SonicWall SSL VPN service until a patch is made available and deployed.'
Meanwhile, SonicWall has previously said that organizations should harden defenses, including security services such as botnet protection that can help detect those targeting SSL VPN endpoints, as well as enforcing multi-factor authentication.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Bloomberg
26 minutes ago
- Bloomberg
Cyber Firm Armis Aims for 2026 IPO
Cyber firm Armis has hit $300 million in annual recurring revenue as demand for cybersecurity platforms takes off. Armis CEO Yevgeny Dibrov speaks with Caroline Hyde and Ed Ludlow on "Bloomberg Tech." (Source: Bloomberg)
Bloomberg
26 minutes ago
- Bloomberg
BMW Takes Aim at Tesla Market Share
BMW plans to release 40 new or updated models with slick software, high-performance computers, and radically different design cues. Bloomberg's Stefan Nicola explains why this is a swing at Tesla on "Bloomberg Tech." (Source: Bloomberg)
Forbes
26 minutes ago
- Forbes
AI Models Replace Fashion Models And Business Models
Fashion modeling faces significant technological disruption as AI platforms expand beyond basic model generation into comprehensive content creation systems. Precedence Research projects the AI fashion market will reach $60 billion by 2034, with annual growth rates of nearly 40%. The transformation happening in fashion offers a roadmap for how other industries can leverage AI not just for efficiency but for fundamental business model innovation. Fashion's combination of creative content, rapid market cycles, and direct consumer feedback loops exists across sectors from hospitality to financial services. This shift aligns what's happening in venture capital, where data-driven methodologies are transforming traditional investment paradigms—a movement reminiscent of how algorithmic trading revolutionized public markets. AI is Now More Than a Fashion Accessory More recently, leading retailers have progressed from testing AI to full deployment. H&M announced in March 2025 that it plans to create 30 digital versions of existing models. Levi Strauss began experimenting with AI models in 2023 as part of diversity initiatives, and Burberry introduced immersive virtual fitting rooms, among other innovations, that offer personalized experiences. Sara Ziff, who founded the Model Alliance, expressed concerns that apply across industries: "In an industry that has historically been a backwater for workers' rights, H&M's new initiative raises critical questions about consent and compensation." The Fashion Workers Act in New York, effective June 19, 2025, now requires explicit consent from models before their likeness can be used in AI applications. Learning From Failure: A Revenue-First AI Approach Ella Zhang's experience with Creati highlights a critical lesson for AI implementation. Her first AI platform attracted 7 million users but generated no revenue. This aligns with McKinsey Senior Partner Gemma D'Auria's assessment that many companies lag "way behind" in translating analytics into business value. "The product validation should come from revenue, not just users," Zhang explained. "If they're not paying, they're telling you something's wrong." This principle applies universally. Zhang conducted more than 300 customer interviews before discovering that companies were "still spending $70,000 to $100,000 on agencies just for a launch video," with costs driven by creative ideation rather than production. Zhang repositioned Creati as a comprehensive ideation engine generating both digital models and viral marketing strategies. The company now reports revenue exceeding $13 million, demonstrating the value of solving real business problems rather than showcasing technical capabilities. Cross-Industry Application of an Element-Based Architecture Creati's technical approach centers on what Zhang calls an "element-based" architecture, allowing users to modify products, backgrounds, and styles in real time while maintaining visual consistency. This mirrors how successful viral content works: remixable components that maintain brand identity. More importantly, this represents a shift from AI tools to AI agents, systems that work autonomously on behalf of users rather than merely assisting them. Creati's platform generates more than images; it creates viral marketing strategies, optimizes based on performance data, and continuously improves the output. This agent-based approach transforms AI from a productivity tool into a strategic partner. Financial services organizations also could transform customer acquisition using similar viral content engines. Instead of static rate comparisons, banks could deploy AI agents that generate thousands of personalized financial journey videos, each showing different life scenarios (first home, retirement, college savings) with consistent brand messaging but customized visual narratives that resonate with specific demographics. The agent would autonomously test, learn, and optimize which narratives drive conversions. Pharmaceutical companies also face similar content challenges when explaining complex treatments. An element-based approach would allow them to generate patient education videos that swap out demographics, conditions, and treatment scenarios while maintaining medical accuracy. The same drug interaction could be explained through culturally relevant scenarios for different communities, increasing comprehension and compliance. Similarly, many software companies struggle to demonstrate product value across a diversity of use cases. Creati's model suggests that such companies could generate viral demonstration videos where the core functionality remains constant but industry contexts, user personas, and problem scenarios adapt dynamically. "Consistency is crucial for e-commerce owners when selling physical goods," Zhang noted. This principle becomes even more critical when the "product" is trust—whether in financial services, healthcare, or enterprise software. Data Lakes as a Competitive Moat The Creati platform also creates a competitive advantage through an integrated data infrastructure. It automatically connects with advertising platforms to track performance metrics, then optimizes content. This demonstrates how information assets become competitive moats in the digital economy. Unlike physical assets that depreciate, data gains value through use and integration. The viral content space amplifies this effect because success metrics are immediately measurable through engagement rates and conversions. Similar dynamics drove the algorithmic trading revolution that transformed financial markets, where firms that integrated data feedback loops gained insurmountable advantages over traditional traders. Insurance companies, for example, could adopt this approach to track which risk scenarios generate the most policy inquiries and automatically generate more content variations around successful themes. Streaming services could analyze which preview styles drive subscriptions, then generate thousands of variations for different audience segments. The key is that each iteration makes the system smarter, creating barriers competitors cannot easily overcome, much like how quantitative hedge funds can dominate markets through data accumulation and algorithmic refinement. Zhang's philosophy guides successful adoption: "In a space dominated by demos and prototypes, Creati stands out by doing the hard thing: building something people will pay for." This revenue-first approach demands identifying processes where human creativity costs exceed value delivered. Viral content creation represents one such area across industries. Building integrated feedback loops ensures continuous improvement rather than static automation. Element-based architectures enable mass customization within brand constraints. Value-sharing models align AI benefits with creative professionals rather than displacing them entirely. The Virtual AI Workforce: An Economic Reality The Bureau of Labor Statistics counts 3600 professional models in the United States. Naomi Ellis of Arizona State University argues that professionals who master AI tools will maintain advantages rather than face replacement. The fashion industry's transition offers concrete models. H&M grants models ownership of their digital twins, creating ongoing revenue streams. And Creati's marketplace enables content creators to earn from viral templates they design. This shift from one-time payment to recurring revenue could transform creative industries. These new 'infonomics' prove compelling. A professional fashion shoot in the US typically costs $10,000–$30,000 for a day's production (with luxury editorials occasionally topping $50,000 for exclusive campaigns). Daily model rates usually range from $500 to $5,000, with elite talent earning more. While creative agencies may charge $10,000–$50,000 for digital-first viral concepts—and sometimes up to $100,000 for major productions—a new wave of AI platforms offers nearly unlimited, studio-quality fashion content from just $29–$59 per month, drastically reducing barriers for brands and creators. Street Vogue exemplifies transformation potential. Within six months of adopting Creati, the company grew from one to 20 employees and multiplied revenue twelvefold. The key: redirecting production budgets toward distribution and paid amplification of AI-generated content. However, New York's Fashion Workers Act establishes compliance restrictions such as requirements for explicit consent, detailed usage parameters, and separate AI agreements. These will likely manifest in other industries as well, such as healthcare (patient data), finance (algorithmic decisions), and employment (automated evaluations). Regulatory compliance must be built into architectures from inception. And ideally, workforce transformation demands proactive planning and value-sharing models. Market Validation of AI-Based Approaches Several companies compete in this market with distinct approaches. Botika converts flat product images into on-model photography, creates inclusive digital avatars for 3D design integration, and emphasizes bulk processing. However, combining viral ideation with content generation seems to be the next frontier. The broader context reveals significant opportunity. According to Gartner, "91% of retail IT leaders are prioritizing AI as the top technology to implement by 2026." Yet challenges remain: "Despite an average spend of $1.9 million on GenAI initiatives in 2024, less than 30% of AI leaders report their CEOs are happy with AI investment return." This gap between investment Satisfaction indicates that the market requires solutions which provide measurable business value rather than merely technical capabilities. McKinsey's analysis adds perspective on creative applications: "Up to 25 percent of the potential of AI in fashion will come from the creative side," notes the consultancy. Market research firm projected last year that "the integration of AI and machine learning in fashion retail could result in a significant 40% reduction in inventory costs." Other brands have also validated AI-based approaches. The online fashion retailers Shein and Cider have been early adopters of Creati, virtual influencer Lil Miquela generates $11 million annually according to Storyclash, and H&M's digital twin initiative seems to signal industry-wide acceptance. Taking a Page Out of Fashion Every industry faces the same challenge as the fashion industry: leveraging AI for fundamental innovation rather than just incremental improvement. The shift from AI tools to AI agents that can act autonomously marks a critical evolution—systems that do more than assist but rather actively work on behalf of organizations to achieve strategic objectives. Success requires solving expensive problems with measurable ROI. Organizations must create systems that improve through use, building competitive moats from data. The pattern is similar to how algorithmic trading transformed finance: early adopters who built data feedback loops and autonomous trading systems gained advantages that traditional firms could never overcome. Zhang's vision extends beyond fashion: "Creati will be the ideation engine for everything." This positions AI as a universal creative platform rather than task automation. Companies understanding this distinction will transform value propositions and entire business models, not just operations. The technology exists and the economics are undeniable. Fashion's AI transformation offers a blueprint for other industries. Organizations that adapt these lessons to their unique contexts will define the digital economy's future. Those awaiting perfect clarity or that are waylaid by compliance, labor, or other roadblocks may discover competitors have already built insurmountable advantages through integrated AI platforms—ones that generate both ideas and content that shift the economics of their industry.
