Angriffe auf 996 Zyxel-Switches: Konfigurationen und Zugangsdaten gestohlen
https://www.mimikama.org/zyxel-gs1900-sicherheitsluecke-angriffe/
https://www.mimikama.org/zyxel-gs1900-sicherheitsluecke-angriffe/
Angriffe auf 996 Zyxel-Switches: Konfigurationen und Zugangsdaten gestohlen
Eine bekannte Lücke in Zyxel-Switches wird tatsächlich für Angriffe verwendet. Sicherheitsforscher fanden 996 betroffene Geräte in 48 Ländern.
www.mimikama.org
September 22, 2026 at 1:29 PM
Angriffe auf 996 Zyxel-Switches: Konfigurationen und Zugangsdaten gestohlen
https://www.mimikama.org/zyxel-gs1900-sicherheitsluecke-angriffe/
https://www.mimikama.org/zyxel-gs1900-sicherheitsluecke-angriffe/
New Helldown ransomware targets Windows and Linux systems, uses Zyxel firewall exploits for initial access
blog.sekoia.io/helldown-ran...
Helldown Ransomware: an overview of this emerging threat
Comprehensive Analysis of Helldown: Tactics, Techniques, and Procedures (TTPs) and Exploitation of Zyxel Vulnerabilities %
blog.sekoia.io
November 19, 2024 at 10:43 AM
New Helldown ransomware targets Windows and Linux systems, uses Zyxel firewall exploits for initial access
blog.sekoia.io/helldown-ran...
Router maker Zyxel tells customers to replace vulnerable hardware exploited by hackers
Router maker Zyxel tells customers to replace vulnerable hardware exploited by hackers
The Taiwanese hardware maker says it has no plans patch the flaws impacting legacy router models
© 2024 TechCrunch. All rights reserved. For personal use only.
tcrn.ch
February 5, 2025 at 10:10 AM
Router maker Zyxel tells customers to replace vulnerable hardware exploited by hackers
Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
CISA orders feds to patch Zyxel flaw exploited for data theft
Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
www.bleepingcomputer.com
September 22, 2026 at 8:53 AM
Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
GreyNoise has observed exploit attempts targeting CVE-2023-28771 — an RCE vuln affecting Zyxel devices. Full analysis + malicious IPs ⬇️
#Cybersecurity #ThreatIntel #Vulnerabilities #GreyNoise
#Cybersecurity #ThreatIntel #Vulnerabilities #GreyNoise
GreyNoise Observes Exploit Attempts Targeting Zyxel CVE-2023-28771
On June 16, GreyNoise observed exploit attempts targeting CVE-2023-28771 — a remote code execution vulnerability affecting Zyxel Internet Key Exchange (IKE) packet decoders over UDP port 500.
www.greynoise.io
June 16, 2025 at 9:04 PM
GreyNoise has observed exploit attempts targeting CVE-2023-28771 — an RCE vuln affecting Zyxel devices. Full analysis + malicious IPs ⬇️
#Cybersecurity #ThreatIntel #Vulnerabilities #GreyNoise
#Cybersecurity #ThreatIntel #Vulnerabilities #GreyNoise
Die Dinger bzw. der Hersteller hießen/heißt ‚Zyxel‘ :)
Zyxel – Wikipedia
de.wikipedia.org
August 6, 2025 at 6:21 AM
Die Dinger bzw. der Hersteller hießen/heißt ‚Zyxel‘ :)
[PR] Zyxel Networks Launches XS1935 10G Multi-Gigabit Switches
www.techpowerup.com
September 23, 2026 at 1:41 PM
🚨 Zero-day Zyxel Vulnerability (CVE-2024-40891) under active exploitation. This unpatched flaw exposes 1,500+ devices, enabling system compromise. Monitor traffic, restrict admin access, and track live attacks here:
Active Exploitation of Zero-day Zyxel CPE Vulnerability (CVE-2024-40891) | GreyNoise Blog
CVE-2024-40891: Zyxel CPE Zero-day Exploitation. Hackers are actively exploiting a telnet-based command injection vulnerability in Zyxel CPE devices, impacting 1,500+ exposed systems. No patch is avai...
www.greynoise.io
January 28, 2025 at 9:13 PM
🚨 Zero-day Zyxel Vulnerability (CVE-2024-40891) under active exploitation. This unpatched flaw exposes 1,500+ devices, enabling system compromise. Monitor traffic, restrict admin access, and track live attacks here:
Zyxel has no plans to release patches for two zero-days under attack and is advising customers to replace vulnerable routers. The company says these devices have been “EOL for years” - but the devices are not on Zyxel’s EOL page, and some are still available to buy techcrunch.com/2025/02/05/r...
Router maker Zyxel tells customers to replace vulnerable hardware exploited by hackers | TechCrunch
The Taiwanese hardware maker says it has no plans patch the flaws impacting legacy router models
techcrunch.com
February 5, 2025 at 10:10 AM
Zyxel has no plans to release patches for two zero-days under attack and is advising customers to replace vulnerable routers. The company says these devices have been “EOL for years” - but the devices are not on Zyxel’s EOL page, and some are still available to buy techcrunch.com/2025/02/05/r...
Zyxel won’t patch newly exploited flaws in end-of-life routers
Zyxel won’t patch newly exploited flaws in end-of-life routers
Zyxel has issued a security advisory about actively exploited flaws in CPE Series devices, warning that it has no plans to issue fixing patches and urging users to move to actively supported models.
www.bleepingcomputer.com
February 4, 2025 at 9:34 PM
Zyxel won’t patch newly exploited flaws in end-of-life routers
Reduce, Reuse, Recycle...
REUSE: mein alter WLAN Router sucht ein neues Zuhause.
www.ricardo.ch/de/a/zyxel-n...
Startpreis 1.- (und allfällige Versandkosten)
REUSE: mein alter WLAN Router sucht ein neues Zuhause.
www.ricardo.ch/de/a/zyxel-n...
Startpreis 1.- (und allfällige Versandkosten)
Zyxel NBG5715, Gigabit WLAN Router, 450 Mbit/s, USB | Kaufen auf Ricardo
Startpreis: CHF 1 | Zustand: Gebraucht | Zyxel NBG5715, Gigabit WLAN Router, 450 Mbit/s, USB in Zürich online kaufen auf Ricardo | Der NBG5715 war zu seiner Zeit (2011) ein leistungsstarker WLAN Rout…
www.ricardo.ch
May 3, 2026 at 12:07 PM
Reduce, Reuse, Recycle...
REUSE: mein alter WLAN Router sucht ein neues Zuhause.
www.ricardo.ch/de/a/zyxel-n...
Startpreis 1.- (und allfällige Versandkosten)
REUSE: mein alter WLAN Router sucht ein neues Zuhause.
www.ricardo.ch/de/a/zyxel-n...
Startpreis 1.- (und allfällige Versandkosten)
The new ' #Helldown ' ransomware operation is believed to target vulnerabilities in #Zyxel firewalls to breach corporate networks, allowing them to steal data and encrypt devices.
#cyberattacks #ransomware
via bsky.app/profile/blee...
www.bleepingcomputer.com/news/securit...
Helldown ransomware exploits Zyxel VPN flaw to breach networks
The new 'Helldown' ransomware operation is believed to target vulnerabilities in Zyxel firewalls to breach corporate networks, allowing them to steal data and encrypt devices.
www.bleepingcomputer.com
November 20, 2024 at 1:43 PM
The new ' #Helldown ' ransomware operation is believed to target vulnerabilities in #Zyxel firewalls to breach corporate networks, allowing them to steal data and encrypt devices.
#cyberattacks #ransomware
via bsky.app/profile/blee...
www.bleepingcomputer.com/news/securit...
Zyxel is warning that a bad security signature update is causing critical errors for USG FLEX or ATP Series firewalls, including putting the device into a boot loop.
Zyxel warns of bad signature update causing firewall boot loops
Zyxel is warning that a bad security signature update is causing critical errors for USG FLEX or ATP Series firewalls, including putting the device into a boot loop.
www.bleepingcomputer.com
January 24, 2025 at 8:39 PM
Zyxel is warning that a bad security signature update is causing critical errors for USG FLEX or ATP Series firewalls, including putting the device into a boot loop.
The new 'Helldown' ransomware operation is believed to target vulnerabilities in Zyxel firewalls to breach corporate networks, allowing them to steal data and encrypt devices.
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Helldown ransomware exploits Zyxel VPN flaw to breach networks
The new 'Helldown' ransomware operation is believed to target vulnerabilities in Zyxel firewalls to breach corporate networks, allowing them to steal data and encrypt devices.
www.bleepingcomputer.com
November 19, 2024 at 5:25 PM
The new 'Helldown' ransomware operation is believed to target vulnerabilities in Zyxel firewalls to breach corporate networks, allowing them to steal data and encrypt devices.
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Zyxel says it has no plans to patch two *actively exploited* flaws in its routers affecting thousands of customers.
Instead, Zyxel is advising customers to replace affected devices and buy new routers. However, the buggy routers are *still* available for purchase.
techcrunch.com/2025/02/05/r...
Instead, Zyxel is advising customers to replace affected devices and buy new routers. However, the buggy routers are *still* available for purchase.
techcrunch.com/2025/02/05/r...
Router maker Zyxel tells customers to replace vulnerable hardware exploited by hackers | TechCrunch
The Taiwanese hardware maker says it has no plans patch the flaws impacting legacy router models
techcrunch.com
February 5, 2025 at 1:06 PM
Zyxel says it has no plans to patch two *actively exploited* flaws in its routers affecting thousands of customers.
Instead, Zyxel is advising customers to replace affected devices and buy new routers. However, the buggy routers are *still* available for purchase.
techcrunch.com/2025/02/05/r...
Instead, Zyxel is advising customers to replace affected devices and buy new routers. However, the buggy routers are *still* available for purchase.
techcrunch.com/2025/02/05/r...
Hackers Actively Deploying Zyxel Firewall Flaw To Deploy Ransomware
Hackers Actively Deploying Zyxel Firewall Flaw To Deploy Ransomware
Cybersecurity experts have uncovered a wave of attacks exploiting vulnerabilities in Zyxel firewall to deploy the Helldown ransomware.
cybersecuritynews.com
November 29, 2024 at 7:19 AM
Hackers Actively Deploying Zyxel Firewall Flaw To Deploy Ransomware
#Zyxel devices are under active attack via CVE-2023-28771. Researchers spotted a sudden spike in exploit attempts from 244 IPs, possibly tied to #Mirai botnet variants.
🔗 hackread.com/zyxel-device...
#CyberSecurity #Vulnerability #IoT #CyberAttack #Botnet
🔗 hackread.com/zyxel-device...
#CyberSecurity #Vulnerability #IoT #CyberAttack #Botnet
Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
hackread.com
June 23, 2025 at 10:48 AM
#Zyxel devices are under active attack via CVE-2023-28771. Researchers spotted a sudden spike in exploit attempts from 244 IPs, possibly tied to #Mirai botnet variants.
🔗 hackread.com/zyxel-device...
#CyberSecurity #Vulnerability #IoT #CyberAttack #Botnet
🔗 hackread.com/zyxel-device...
#CyberSecurity #Vulnerability #IoT #CyberAttack #Botnet
Hackers are exploiting a critical command injection vulnerability in Zyxel CPE Series devices that is currently tracked as CVE-2024-40891 and remains unpatched since last July.
Hackers exploit critical unpatched flaw in Zyxel CPE devices
Hackers are exploiting a critical command injection vulnerability in Zyxel CPE Series devices that is currently tracked as CVE-2024-40891 and remains unpatched since last July.
www.bleepingcomputer.com
January 29, 2025 at 2:42 PM
Hackers are exploiting a critical command injection vulnerability in Zyxel CPE Series devices that is currently tracked as CVE-2024-40891 and remains unpatched since last July.
Zyxel firewalls borked by buggy update, on-site access required for fix
Zyxel firewalls borked by buggy update, on-site access required for fix
Boxes stuck in boot loops and various other malfunctions
Zyxel customers are dealing with a range of issues including reboot loops after an update on Friday went awry.…
dlvr.it
January 27, 2025 at 3:33 PM
Zyxel firewalls borked by buggy update, on-site access required for fix
Pure lui sta cominciando a dare i numeri con questo caldo.
July 22, 2026 at 8:16 AM
Pure lui sta cominciando a dare i numeri con questo caldo.
📌 Chinese Threat Actor Exploits ZyXEL Switch Vulnerability to Compromise Nearly 1,000 Devices https://www.cyberhub.blog/article/32396-chinese-threat-actor-exploits-zyxel-switch-vulnerability-to-compromise-nearly-1000-devices
Chinese Threat Actor Exploits ZyXEL Switch Vulnerability to Compromise Nearly 1,000 Devices
A Chinese threat actor has exploited a recent vulnerability in ZyXEL switches to exfiltrate sensitive information from nearly 1,000 affected devices. The exploitation campaign targeted ZyXEL switch infrastructure specifically. The vulnerability was recently disclosed and has been actively leveraged by the threat actor to compromise the network devices and extract data.
www.cyberhub.blog
September 28, 2026 at 1:07 AM
📌 Chinese Threat Actor Exploits ZyXEL Switch Vulnerability to Compromise Nearly 1,000 Devices https://www.cyberhub.blog/article/32396-chinese-threat-actor-exploits-zyxel-switch-vulnerability-to-compromise-nearly-1000-devices