> TritonInfoSec News
Home / Aug 29, 2026 / Story
0
#8 The Hacker News general August 28, 2026 at 10:58 UTC

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

By [email protected] (The Hacker News)

AI Summary

VulnCheck disclosed two factory-installed implants, SPEAKINGSTONE (CVE-2026-74232) and DARKLANTERN (CVE-2026-74233), embedded in firmware of routers manufactured by Shenzhen Zhibotong Electronics (ZBT), both granting unauthenticated remote attackers root-level command execution. One implant is reachable over the network while the other exploits Bluetooth Low Energy to target the router's Locomotion PC. The supply-chain nature of these implants, present from factory, makes detection difficult and affects all devices shipped with the vulnerable firmware.

Read full article → https://thehackernews.com/2026/08/china-made-zbt-r…

Relevance score: 80.0/100

# More from August 29

  1. 1
    McKesson discloses breach after ShinyHunters claims patient data theft BleepingComputer
  2. 2
    Two Alleged ‘TeamPCP’ Hackers Arrested in Australia Krebs on Security
  3. 3
    PaperCut releases second emergency patch for exploited flaws BleepingComputer
  4. 4
    Hundreds of OpenAI Agents Invaded Hugging Face Servers Dark Reading
  5. 5
    Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL The Hacker News
  6. 6
    ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body The Hacker News
  7. 7
    ATF confirms cyberattack hit system containing info on its investigation targets CyberScoop
  8. 9
    APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations The Hacker News
  9. 10
    19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code The Hacker News