SonicWall has issued an urgent advisory encouraging customers to reset all login credentials after researchers discovered that configuration backup files from MySonicWall were inadvertently exposed on public storage. These configuration files often store sensitive elements such as user and group settings, VPN keys, DNS data, and SSL certificates. Past research shows that both ransomware groups and nation-state actors have leveraged exfiltrated configuration files to plan subsequent attacks. While SonicWall has contained the exposure and is working with law enforcement, the company cautioned that organizations using its cloud backup feature should act quickly to prevent unauthorized access. Containment measuresLock down WAN-facing managementTo reduce exposure before resetting passwords, SonicWall advises disabling all WAN-facing management services.