Akira ransomware attack highlights MFA gaps in VPN and RDP access

An Akira ransomware affiliate exploited a SonicWall SSL VPN vulnerability on Aug. 4, 2026, by spraying passwords, demonstrating a common security gap where organizations implement multi-factor authentication (MFA) for cloud services but leave other access points vulnerable.