Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

By Lawrence Abrams

AI Summary

Zyxel patched a zero-day vulnerability in its GS1900 series network switches that attackers actively exploited to compromise nearly 1,000 devices globally, stealing configuration files and plaintext credentials. The flaw was used in targeted attacks before a patch was available, making it a true zero-day exploitation event affecting enterprise and SMB network infrastructure. Administrators with GS1900 switches should apply the patch immediately and audit stolen configs for credential reuse.

Read full article → https://www.bleepingcomputer.com/news/security/zyx…

Relevance score: 79.0/100

# More from November 05

1
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft The Hacker News
2
French blood service hit by Europe-wide cyberattacks on refrigeration The Record
3
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits The Hacker News
4
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory The Hacker News
5
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades The Hacker News
6
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes The Hacker News
7
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction The Hacker News
8
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges The Hacker News
10
More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus The Record