The confirmation arrives as researchers with NCC Group detect a SonicWall zero-day flaw under active attack.