router - Security Ticks

Unauthenticated RCE Flaw Patched in DrayTek Routers

DrayTek, router, Vulnerabilities / SecurityTicks

Unauthenticated RCE Flaw Patched in DrayTek Routers 2025-10-03 at 14:45 By Ionut Arghire The security defect can be exploited remotely via crafted HTTP/S requests to a vulnerable device’s web user interface. The post Unauthenticated RCE Flaw Patched in DrayTek Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React […]

React to this headline:

Unauthenticated RCE Flaw Patched in DrayTek Routers Read More »

Cisco Patches Zero-Day Flaw Affecting Routers and Switches

Cisco, exploited, Featured, Network Security, router, Switch, Vulnerabilities, Zero-Day / SecurityTicks

Cisco Patches Zero-Day Flaw Affecting Routers and Switches 2025-09-25 at 11:46 By Ionut Arghire The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user. The post Cisco Patches Zero-Day Flaw Affecting Routers and Switches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Cisco Patches Zero-Day Flaw Affecting Routers and Switches Read More »

Vulnerabilities Expose Helmholz Industrial Routers to Hacking

Helmholz, ICS, ICS/OT, industrial router, OT, router, Vulnerabilities, vulnerability / SecurityTicks

Vulnerabilities Expose Helmholz Industrial Routers to Hacking 2025-07-22 at 16:57 By Eduard Kovacs Several potentially serious vulnerabilities were recently found and patched in routers made by Germany-based industrial and automation solutions provider Helmholz. The existence of the security holes came to light last week, when Germany’s CERT@VDE published an advisory describing eight vulnerabilities discovered in

React to this headline:

Vulnerabilities Expose Helmholz Industrial Routers to Hacking Read More »

Stealthy backdoor found hiding in SOHO devices running Linux

Asus, backdoor, China, Cisco, CISO, cybercrime, D-Link, Don't miss, hardware, Linksys, Microsoft, News, router, Ruckus Networks, security cameras, SecurityScorecard, Synology / SecurityTicks

Stealthy backdoor found hiding in SOHO devices running Linux 2025-06-23 at 11:02 By Mirko Zorz SecurityScorecard’s STRIKE team has uncovered a network of compromised small office and home office (SOHO) devices they’re calling LapDogs. The threat is part of a broader shift in how China-Nexus threat actors are using Operational Relay Box (ORB) networks to

React to this headline:

Stealthy backdoor found hiding in SOHO devices running Linux Read More »

Organizations Warned of Vulnerability Exploited Against Discontinued TP-Link Routers

CISA KEV, exploited, router, TP-LINK, Vulnerabilities, vulnerability / SecurityTicks

Organizations Warned of Vulnerability Exploited Against Discontinued TP-Link Routers 2025-06-17 at 14:01 By Ionut Arghire CISA warns that a vulnerability impacting multiple discontinued TP-Link router models is exploited in the wild. The post Organizations Warned of Vulnerability Exploited Against Discontinued TP-Link Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Organizations Warned of Vulnerability Exploited Against Discontinued TP-Link Routers Read More »

Law enforcement takes down proxy botnets used by criminals

botnet, Don't miss, FBI, IoT, law enforcement, Lumen, News, Proxy, router, tips, US DoJ / SecurityTicks

Law enforcement takes down proxy botnets used by criminals 2025-05-12 at 21:11 By Zeljka Zorz US and Dutch law enforcement, with the help of Lumen researchers, have disrupted 5socks and Anyproxy, two proxy-for-rent services that were used by criminals for ad fraud and DDoS and brute-force attacks (among other things). The domain seizure notice The

React to this headline:

Law enforcement takes down proxy botnets used by criminals Read More »

Study Identifies 20 Most Vulnerable Connected Devices of 2025

Forescout, ICS/OT, IoT Security, report, router, vulnerability / SecurityTicks

Study Identifies 20 Most Vulnerable Connected Devices of 2025 2025-04-10 at 15:03 By Ionut Arghire Routers are the riskiest devices in enterprise networks as they contain the most critical vulnerabilities, a new Forescout report shows. The post Study Identifies 20 Most Vulnerable Connected Devices of 2025 appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Study Identifies 20 Most Vulnerable Connected Devices of 2025 Read More »

Questions Remain Over Attacks Causing DrayTek Router Reboots

DrayTek, exploited, Network Security, router / SecurityTicks

Questions Remain Over Attacks Causing DrayTek Router Reboots 2025-04-02 at 13:33 By Eduard Kovacs DrayTek has shared some clarifications regarding the recent attacks causing router reboots, but some questions remain unanswered. The post Questions Remain Over Attacks Causing DrayTek Router Reboots appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Questions Remain Over Attacks Causing DrayTek Router Reboots Read More »

Vulnerability Exploitation Possibly Behind Widespread DrayTek Router Reboots

DrayTek, exploited, Network Security, router / SecurityTicks

Vulnerability Exploitation Possibly Behind Widespread DrayTek Router Reboots 2025-03-25 at 17:33 By Eduard Kovacs DrayTek routers around the world are rebooting and the vendor’s statement suggests that it may involve the exploitation of a vulnerability. The post Vulnerability Exploitation Possibly Behind Widespread DrayTek Router Reboots appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Vulnerability Exploitation Possibly Behind Widespread DrayTek Router Reboots Read More »

Swap EOL Zyxel routers, upgrade Netgear ones!

access point, Don't miss, Hot stuff, Netgear, News, router, security update, VulnCheck, vulnerability, Zyxel / SecurityTicks

Swap EOL Zyxel routers, upgrade Netgear ones! 2025-02-05 at 16:18 By Zeljka Zorz There will be no patches for EOL Zyxel routers under attack via CVE-2024-40891, the company has confirmed. Meanwhile, Netgear has issued patches for critical flaws affecting its routers and wireless access points. Zyxel vulnerability: Exploited, no patches CVE-2024-40891, a command injection vulnerability

React to this headline:

Swap EOL Zyxel routers, upgrade Netgear ones! Read More »

Juniper enterprise routers backdoored via “magic packet” malware

backdoor, Don't miss, enterprise, Hot stuff, Juniper Networks, Linux, Lumen, Malware, News, router / SecurityTicks

Juniper enterprise routers backdoored via “magic packet” malware 2025-01-23 at 20:05 By Zeljka Zorz A stealthy attack campaign turned Juniper enterprise-grade routers into entry points to corporate networks via the “J-magic” backdoor, which is loaded into the devices’ memory and spawns a reverse shell when instructed to do so. “Our telemetry indicates the J-magic campaign

React to this headline:

Juniper enterprise routers backdoored via “magic packet” malware Read More »

Sara: Open-source RouterOS security inspector

Don't miss, GitHub, hardware, mikrotik, News, open source, router, software / SecurityTicks

Sara: Open-source RouterOS security inspector 2025-01-09 at 07:03 By Mirko Zorz Sara is an open-source tool designed to analyze RouterOS configurations and identify security vulnerabilities on MikroTik hardware. Sara’s main feature is using regular expressions as the primary analysis mechanism. This allows you to quickly and accurately process RouterOS configuration text files, making the tool

React to this headline:

Sara: Open-source RouterOS security inspector Read More »

Update your OpenWrt router! Security issue made supply chain attack possible

Don't miss, embedded systems, Hot stuff, Linux, networking, News, open source, OpenWRT, router, security update, vulnerability / SecurityTicks

Update your OpenWrt router! Security issue made supply chain attack possible 2024-12-09 at 20:51 By Zeljka Zorz A security issue that could have allowed attackers to serve malicious firmware images to users has been fixed by OpenWrt Project, the organization that helms the development of the popular Linux distribution for embedded devices. About OpenWrt OpenWrt

React to this headline:

Update your OpenWrt router! Security issue made supply chain attack possible Read More »

The role of compromised cyber-physical devices in modern cyberattacks

Don't miss, Features, Hot stuff, ICS/SCADA, IIoT, IoT, News, OT, router, security cameras, smart building, smart grid, smart home, supply chain compromise, Trend Micro / SecurityTicks

The role of compromised cyber-physical devices in modern cyberattacks 2024-10-17 at 11:46 By Zeljka Zorz Cyber-physical devices are increasingly getting compromised and leveraged by criminal groups and state-sponsored threat actors. Fyodor Yarochkin, Senior Threat Solution Architect with Trend Micro, believes that getting a better understanding of attackers’ infrastructure leads to a better understanding of the

React to this headline:

The role of compromised cyber-physical devices in modern cyberattacks Read More »

FBI forced Flax Typhoon to abandon its botnet

botnet, China, consumer, Don't miss, DVR, enterprise, FBI, government-backed attacks, Hot stuff, IoT, Justice Department, Lumen, NAS, News, router, security cameras, SMBs / SecurityTicks

FBI forced Flax Typhoon to abandon its botnet 2024-09-19 at 14:16 By Zeljka Zorz A botnet operated by the Chinese state-sponsored threat actor known as Flax Typhoon has been disrupted by the law enforcement agency and abandoned by the group, FBI Director Chris Wray confirmed on Wednesday. “We executed court-authorized operations to take control of

React to this headline:

FBI forced Flax Typhoon to abandon its botnet Read More »

D-Link Patches Critical Router Vulnerabilities

D-Link, router, Vulnerabilities / SecurityTicks

D-Link Patches Critical Router Vulnerabilities 2024-09-17 at 17:34 By Ionut Arghire D-Link has released patches for critical vulnerabilities that could allow attackers to execute arbitrary code and commands on routers. The post D-Link Patches Critical Router Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

D-Link Patches Critical Router Vulnerabilities Read More »

Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261)

access point, consumer, Don't miss, firewall, Hot stuff, ISP, News, router, security update, SMBs, vulnerability, Zyxel / SecurityTicks

Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261) 2024-09-03 at 16:01 By Zeljka Zorz Zyxel has patched a myriad of vulnerabilities in its various networking devices, including a critical one (CVE-2024-7261) that may allow unauthenticated attackers to execute OS commands on many Zyxel access points (APs) and security routers by

React to this headline:

Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261) Read More »

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware

Don't miss, Finite State, Forescout, hardware, Hot stuff, Internet of Things, News, patching, report, router, survey, vulnerability assessment / SecurityTicks

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware 2024-08-07 at 09:16 By Help Net Security Forescout has published a new report examining the current state of the software supply chain in OT/IoT routers. The study uncovered that OT and IoT cellular routers and those used in small offices and homes contain outdated software components

React to this headline:

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware Read More »

Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers

D-Link, Network Security, router / SecurityTicks

Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers 2024-07-01 at 15:31 By Ionut Arghire GreyNoise observes the first attempts to exploit a path traversal vulnerability in discontinued D-Link DIR-859 WiFi routers. The post Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers Read More »

Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers

Netgear, router, Vulnerabilities / SecurityTicks

Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers 2024-06-11 at 17:01 By Ionut Arghire Redfox Security warns of multiple vulnerabilities in Netgear WNR614 routers discontinued three years ago. The post Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers Read More »