Blog - Cyber Security Informer

Critical Zyxel Firewall Vulnerability Exploited in DDOS Attacks

Heimadal Security

JULY 21, 2023

Multiple DDoS botnets have actively exploited a critical vulnerability discovered in Zyxel firewall models, as revealed by cybersecurity researchers.

Firewall

Firewall DDOS Cybersecurity

Vulnerability Alert! Two New Exploited Flaws Discovered on Zyxel Firewalls

Heimadal Security

JUNE 7, 2023

CISA included CVE-2023-33009 and CVE-2023-33010 Zyxel Firewalls flaws in its Known Exploited Vulnerabilities (KEV) catalog. The flaws are buffer overflow vulnerabilities and were rated 9.8 Zyxel released patches on May 24th, 2023, and […] The post Vulnerability Alert!

Firewall

Firewall Cybersecurity

CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog

Security Affairs

MAY 17, 2022

US Critical Infrastructure Security Agency (CISA) adds critical CVE-2022-30525 RCE flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog. Experts recommend also private organizations review the Catalog and address the vulnerabilities in their infrastructure. Commands are executed as the nobody user.”

Firewall

Firewall VPN Firmware Internet

Webinars

Reimagining Cybersecurity Training: Driving Real Impact on Security Culture

MORE WEBINARS

Zyxel fixed a critical RCE flaw in its firewall devices and urges customers to install the patches

Security Affairs

APRIL 28, 2023

A vulnerability impacting Zyxel firewalls, tracked as CVE-2023-28771, can be exploited to execute arbitary code on vulnerable devices. Researchers from TRAPA Security have discovered a critical remote code execution vulnerability, tracked as CVE-2023-28771 (CVSS score 9.8), impacting Zyxel Firewall.

Firewall

Firewall Firmware VPN Authentication

Expert found Backdoor credentials in ZyXEL LTE3301 M209

Security Affairs

DECEMBER 24, 2022

The cybersecurity researcher RE-Solver discovered Backdoor credentials in ZyXEL LTE3301-M209 LTE indoor routers. Security researcher ReSolver announced the discovery of hardcoded credentials (CVE-2022-40602) in ZyXEL LTE3301-M209 LTE indoor routers. Below is the timeline for this issue: 12 Sep 2022: Vulnerability reported to ZyXEL.

Firmware

Firmware Passwords Hacking Cybersecurity

Zyxel addresses four flaws affecting APs, AP controllers, and firewalls

Security Affairs

MAY 26, 2022

Zyxel addressed multiple vulnerabilities impacting many of its products, including APs, AP controllers, and firewalls. Zyxel has released security updates to address multiple vulnerabilities affecting multiple products, including firewall, AP, and AP controller products. SecurityAffairs – hacking, Zyxel).

Firewall

Firewall VPN Authentication Cyber Attacks

EnemyBot malware adds new exploits to target CMS servers and Android devices

Security Affairs

MAY 30, 2022

The operators of the EnemyBot botnet added exploits for recently disclosed flaws in VMware, F5 BIG-IP, and Android systems. Operators behind the EnemyBot botnet are expanding the list of potential targets adding exploits for recently disclosed critical vulnerabilities in from VMware, F5 BIG-IP, and Android.

Malware

Malware DDOS IoT Cybercrime

Critical Vulnerability Discovered in Patched Zyxel Storage Devices

Security Boulevard

JUNE 21, 2023

On June 20, 2023, Zyxel, a well-known network-attached storage (NAS) device manufacturer, disclosed a critical security flaw known as CVE-2023-27992. This pre-authentication command injection vulnerability has been assigned a high CVSS score of 9.8, indicating its severe impact and ease of exploitation.

Manufacturing

Manufacturing Authentication

Expert found Backdoor credentials in ZyXEL LTE3301 M209

Security Affairs

DECEMBER 24, 2022

The cybersecurity researcher RE-Solver discovered Backdoor credentials in ZyXEL LTE3301-M209 LTE indoor routers. Security researcher ReSolver announced the discovery of hardcoded credentials (CVE-2022-40602) in ZyXEL LTE3301-M209 LTE indoor routers. Below is the timeline for this issue: 12 Sep 2022: Vulnerability reported to ZyXEL.

Firmware

Firmware Passwords Hacking Cybersecurity

Enemybot, a new DDoS botnet appears in the threat landscape

Security Affairs

APRIL 17, 2022

Enemybot is a DDoS botnet that targeted several routers and web servers by exploiting known vulnerabilities. Researchers from Fortinet discovered a new DDoS botnet, tracked as Enemybot, that has targeted several routers and web servers by exploiting known vulnerabilities. ” reads the analysis published by Fortinet.

DDOS

DDOS Architecture Malware Cybercrime

Security Affairs newsletter Round 367 by Pierluigi Paganini

Security Affairs

MAY 29, 2022

sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. To nominate, please visit:?. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

InfoSec

InfoSec Spyware DDOS Firewall

Security Affairs newsletter Round 417 by Pierluigi Paganini – International edition

Security Affairs

APRIL 30, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter ) The post Security Affairs newsletter Round 417 by Pierluigi Paganini – International edition appeared first on Security Affairs.

Cybercrime

Cybercrime Malware Hacking Accountability

Security Affairs newsletter Round 365 by Pierluigi Paganini

Security Affairs

MAY 15, 2022

Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice. Pierluigi Paganini.

Hacking

Hacking Ransomware Manufacturing Firewall

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

CyberSecurity Insiders

NOVEMBER 11, 2021

Deployed with more than 30 exploits, it has the potential of targeting millions of routers and IoT devices. Key Takeaways: BotenaGo has more than 30 different exploit functions to attack a target. Mapping attack functions to relevant vulnerable systems. Exploit delivery. It also has different DDoS functionality.

Malware

Malware IoT Firmware Authentication

Security Affairs newsletter Round 366 by Pierluigi Paganini

Security Affairs

MAY 22, 2022

Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice.

Ransomware

Ransomware Firewall Hacking Malware

China-linked threat actors have breached telcos and network service providers

Security Affairs

JUNE 8, 2022

The nation-state actors exploit publicly known vulnerabilities to compromise the target infrastructure. . The RouterSploit Framework allows operators to scan for vulnerable embedded devices, while RouterScan allows for the scanning of IP addresses for vulnerabilities. To nominate, please visit:?. Pierluigi Paganini.

Telecommunications

Telecommunications Authentication Passwords Accountability

BotenaGo strikes again – malware source code uploaded to GitHub

CyberSecurity Insiders

JANUARY 26, 2022

Since the Mirai botnet can be now modified and compiled by different adversaries, many new variants have become available over time featuring new capabilities and new exploits. The top of the source code on GitHub shows a comment with the list of current exploits for “supported” vendors and software, as shown in Figure 1.

Malware

Malware IoT Authentication Antivirus

Security Affairs newsletter Round 230

Security Affairs

SEPTEMBER 8, 2019

Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog. Android Zero-Day exploits are the most expensive in the new Zerodium price list. Some Zyxel devices can be hacked via DNS requests. Once again thank you!

IoT

IoT Data breaches DNS Advertising

Hacker is targeting DNA sequencer applications from Iranian IP address

Security Affairs

JUNE 17, 2019

The attackers are leveraging a still-unpatched zero-day vulnerability, tracked as CVE-2017-6526 , to gain full control over the targeted systems. The vulnerability in dnaLIMS was reported to the vendor in 2017, but it is still unpatched. ” reads a blog post published by the expert. Why DNA sequencing apps?

DDOS

DDOS Advertising IoT Marketing

Cyber Security Informer

Critical Zyxel Firewall Vulnerability Exploited in DDOS Attacks

Vulnerability Alert! Two New Exploited Flaws Discovered on Zyxel Firewalls

Webinars

Trending Sources

CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog

Webinars

Zyxel fixed a critical RCE flaw in its firewall devices and urges customers to install the patches

Expert found Backdoor credentials in ZyXEL LTE3301 M209

Zyxel addresses four flaws affecting APs, AP controllers, and firewalls

EnemyBot malware adds new exploits to target CMS servers and Android devices

Critical Vulnerability Discovered in Patched Zyxel Storage Devices

Expert found Backdoor credentials in ZyXEL LTE3301 M209

Enemybot, a new DDoS botnet appears in the threat landscape

Security Affairs newsletter Round 367 by Pierluigi Paganini

Security Affairs newsletter Round 417 by Pierluigi Paganini – International edition

Security Affairs newsletter Round 365 by Pierluigi Paganini

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

Security Affairs newsletter Round 366 by Pierluigi Paganini

China-linked threat actors have breached telcos and network service providers

BotenaGo strikes again – malware source code uploaded to GitHub

Security Affairs newsletter Round 230

Hacker is targeting DNA sequencer applications from Iranian IP address

Stay Connected