![[FORECAST] The breach may start after the patch](https://storage.ghost.io/c/06/e5/06e5730b-7d78-4713-9cec-6cba31d297f5/content/images/size/w600/2026/07/alphahunt-forecast-the-breach-may-start-after-the-patch-hero-2026-07-20.png)
forecasts
[FORECAST] The breach may start after the patch
We put a 45% chance on a public case proving that stolen edge-appliance access survived remediation and enabled a later intrusion.
forecasts
We put a 45% chance on a public case proving that stolen edge-appliance access survived remediation and enabled a later intrusion.
unc6148
UNC6148, a financially motivated threat actor tracked by Google Threat Intelligence Group (GTIG), has been actively exploiting fully patched but end-of-life SonicWall Secure Mobile Access (SMA) 100 series appliances since at least October 2024...