Cybersecurity update: SonicWall security advisory (AV26-1017) – Update 1, Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking, and Veeam

These are official cybersecurity alerts from the past week that may affect small and medium businesses. Each item is summarised from the source and links back to it. If you run the products named below, apply the vendor’s updates.

SonicWall security advisory (AV26-1017) – Update 1

Canadian Centre for Cyber Security, 9 October 2026.

Serial number: AV26-1017Date: October 7, 2026Updated: October 9, 2026 As of October 6, 2026, SonicWall is affected by vulnerabilities in the following product: SMA1000 Models – 6210, 7210, 8200v Version 12.4.3-03670 (platform-hotfix) and prior Version 12.5.0-03082 (platform-hotfix) and prior Update 1 Open source reporting indicates that CVE-2026-102255 is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. SonicWall SMA1000 Series Appliances Affected…

If these products are in use, apply the vendor updates and read the advisory: official source.

Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking

CISA, 8 October 2026.

Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are combining automated scanning tools, large-scale botnets, and hands-on exploitation techniques to target and steal sensitive data from organizations worldwide, including US critical infrastructure sectors. These actors exploit vulnerabilities by using scanning tools, cross-site scripting attacks, and password spraying on Microsoft Exchange…

If these products are in use, apply the vendor updates and read the advisory: official source.

Veeam

Canadian Centre for Cyber Security, 7 October 2026.

Serial number: AV26-1009Date: October 7, 2026 As of October 7, 2026, Veeam is affected by vulnerabilities in the following product: Veeam Backup and Replication Prior to 12.3.2.P4 Prior to 13.03 Prior to 13.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. KB4934: Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2 P4 Veeam Support Knowledge Base

If these products are in use, apply the vendor updates and read the advisory: official source.

How Techloom can help

Techloom can review devices, email filtering and Microsoft 365 settings as a security assessment or through managed IT support. We do not guarantee that any control prevents every attack.