Zyxel legacy DSL CPE products affected by exploited zero-day vulnerabilities (CVE-2024-40891 and CVE-2024-40890) will not be ...

A new variant of the Mirai-based botnet malware Aquabot has been observed actively exploiting CVE-2024-41710, a command ...

The attacks they presented come in three flavors: UART, eMMC, and command injection bugs. I’m going to add the break now, but I’ll give a rundown of most of the device exploits they showed off.

Zyxel has issued a security advisory about actively exploited flaws in CPE Series devices, warning that it has no plans to ...

A vulnerability in Mitel phones is being abused once again Hackers are using the bug to deploy a variant of Mirai and run ...

CISA released seven advisories for serious vulnerabilities in industrial control systems products from Schneider Electric, Rockwell Automation, B&R Industrial, and BD.

Critical zero-day vulnerability CVE-2024-40891 in Zyxel CPE devices is under active attack, affecting 1,500+ devices.

Aquabot botnet exploits CVE-2024-41710 in Mitel phones, using a public PoC to deploy DDoS malware since January 2025.

Another thing worth noting is that this is a prompt injection attack ... a legitimate open source command-and-control (C2) framework developed by BishopFox for red teaming and penetration testing ...

Apple has released fixes for dozens of vulnerabilities in its mobile and desktop products, including an iOS zero-day ...