The last 30 days
What's shipping, what's moving, what to watch — across vDefend, Avi, and the lateral-security ecosystem.
Pinned
v5.2 · GA
August 6, 2026
Feature release introducing vDefend 1-2-3, a staged Advanced Threat Prevention rollout (Distributed IDS/IPS, network traffic analysis, and NDR) that compresses deployment from months to weeks. Adds on-premises malware analysis, air-gapped threat-intel updates, and a 2-node platform footprint cutting hardware requirements by up to a third. Distributed Firewall throughput up to 75 Gbps per host on 100G NICs; Distributed IDS/IPS up to 17 Gbps per server.
v32.1.1 · GA
May 12, 2026
Feature release adding native VCF 9.1 integration, MCP load balancing with session persistence and OAuth 2.0, NSX Security Groups support in Virtual Service security policies, and 65 resolved issues. Licensing shifts to digitally signed subscription files — 25-character keys are deprecated.
Threat & CVE
Disclosures, exploitation-in-the-wild, and KEV additions worth tracking.
CVE-2026-15409 and CVE-2026-15410 let an unauthenticated attacker open a WebSocket tunnel to restricted services and escalate to root on SMA 1000 VPN appliances, harvesting credentials and TOTP seeds along the way. Exploitation began weeks before SonicWall's mid-July fix; INC's leak site listed 885+ victims as of early August. Patching the appliance doesn't invalidate MFA seeds stolen before the fix — rotation is required.
The Hacker News