Security News

Quad7 botnet targets more SOHO and VPN routers, media servers
2024-09-09 21:30

The Quad7 botnet is expanding its targeting scope with the addition of new clusters and custom implants that now also target Zyxel VPN appliances and Ruckus wireless routers. [...]

Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers
2024-09-04 11:27

Zyxel has released software updates to address a critical security flaw impacting certain access point (AP) and security router versions that could result in the execution of unauthorized...

Zyxel warns of critical OS command injection flaw in routers
2024-09-03 19:59

Zyxel has released security updates to address a critical vulnerability impacting multiple models of its business routers, potentially allowing unauthenticated attackers to perform OS command...

D-Link says it is not fixing four RCE flaws in DIR-846W routers
2024-09-03 15:46

D-Link is warning that four remote code execution (RCE) flaws impacting all hardware and firmware versions of its DIR-846W router will not be fixed as the products are no longer supported. [...]

Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261)
2024-09-03 12:47

Zyxel has patched a myriad of vulnerabilities in its various networking devices, including a critical one (CVE-2024-7261) that may allow unauthenticated attackers to execute OS commands on many...

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware
2024-08-07 06:14

The study uncovered that OT and IoT cellular routers and those used in small offices and homes contain outdated software components associated with known vulnerabilities. The research showed that widely used OT/IoT router firmware images have, on average, 20 exploitable n-day vulnerabilities affecting the kernel, leading to increasing security risks.

Netgear warns users to patch auth bypass, XSS router flaws
2024-07-12 15:34

Netgear warned customers to update their devices to the latest available firmware, which patches stored cross-site scripting and authentication bypass vulnerabilities in several WiFi 6 router models. The stored XSS security flaw impacts the XR1000 Nighthawk gaming router.

Chinese APT40 hackers hijack SOHO routers to launch attacks
2024-07-09 15:11

A joint advisory from international cybersecurity agencies and law enforcement warns of the tactics used by the Chinese state-sponsored APT 40 hacking group and their hijacking of SOHO routers to launch cyberespionage attacks. Previously, APT40 was linked to a wave of attacks targeting over 250,000 Microsoft Exchange servers using the ProxyLogon vulnerabilities and campaigns involving exploiting flaws in widely used software, such as WinRAR. APT40 activity overview.

OVHcloud Hit with Record 840 Million PPS DDoS Attack Using MikroTik Routers
2024-07-05 12:20

French cloud computing firm OVHcloud said it mitigated a record-breaking distributed denial-of-service (DDoS) attack in April 2024 that reached a packet rate of 840 million packets per second...

Juniper Networks flings out emergency patches for perfect 10 router vuln
2024-07-01 11:32

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.