At Flameera, we understand that protecting our clients’ digital assets requires a combination of visibility, intelligence, and responsiveness. That’s why we strive to ensure our Managed Detection and Response (MDR) service is constantly evolving to adapt to the latest and most sophisticated threats.
Given today’s increasingly dynamic and hostile threat landscape, we know that the ability to anticipate is at least as important as the ability to respond.
Alert on SonicWall VPN
In mid-August 2025, several cybersecurity experts began raising alarms about an active exploitation campaign targeting SonicWall devices, which are widely used in corporate environments for access management and perimeter security. In the early stages of the incident, there was uncertainty about whether it involved a 0-day vulnerability or the evolution of a previously known one.
In any case, there was evidence that attackers were successfully breaching victims’ internal networks. One of the most concerning aspects was that they appeared to bypass enhanced authentication mechanisms, including two-factor authentication (2FA).
The ultimate goal of this malicious campaign seemed to be the deployment of ransomware—specifically a variant known as Akira, which has gained notoriety in recent months. These types of attacks not only compromise system availability but can also have a devastating impact on the reputation and operational continuity of affected organizations.
Operational Intelligence and Coordinated Response
Faced with the clear threat posed by this incident, at Flameera we reviewed the asset inventory of all our clients and immediately notified them through private channels, sharing the latest intelligence available at every stage. Some clients chose to disable their VPNs. However, several others didn’t have that option—business simply wouldn’t allow it. These clients were deeply concerned about the severity of the case, so to ensure their safety, we went a step further: we needed to extend visibility beyond the endpoint in their environments.
Historically, SIEM solutions for raw telemetry ingestion from devices have involved operational costs that are often prohibitive: licensing, infrastructure, storage, expertise, maintenance time, etc. But we had the solution: with next-generation products, we were able to ingest and exploit this telemetry in record time and at highly affordable costs.
We got to work: quickly and non-intrusively, we deployed SIEM technology that collected telemetry from all our clients’ SonicWall devices. Of course, this telemetry was natively integrated with the rest of our monitoring stack, providing additional visibility and allowing our monitoring and Threat Hunting teams to correlate threats.
Thanks to our agility—and that of the technologies we use—we were able to integrate into our clients’ infrastructure in practically a single morning. Only brief working sessions with each client were needed to deploy the product agents we rely on, and our team was already receiving all the telemetry necessary to detect any exploitation attempts on their SonicWall devices. Once again, we demonstrated that proactive and effective threat response is possible without incurring costs that only a few can afford.
Managed Security That Evolves With You
At Flameera, we understand that cybersecurity is not a product, but a continuous process. Every day, we work to ensure our managed services evolve to meet current threats. Modular security integration, threat monitoring, and human support are part of our commitment to real, accessible, and effective security.
Clients of all sizes and sectors are already benefiting from a monitoring and response service of a quality that has traditionally been difficult to attain.
- Would you like to protect your company with a top-tier monitoring and response service at one of the best prices on the market?
- Would you like to learn about the technologies we use and the advantages they offer over the competition?
Want to learn more about our managed security solutions?
Contact us and discover how Flameera can be your strategic cybersecurity ally.