Latest D-Link news

Hackers exploit critical D-Link DIR-859 router flaw to steal passwords

Hackers are exploiting a critical vulnerability that affects all D-Link DIR-859 WiFi routers to collect account information from the device, including passwords.
- Bill Toulas
- June 29, 2024
- 11:18 AM
- 1
CISA warns of hackers exploiting Chrome, EoL D-Link bugs

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added three security vulnerabilities to its 'Known Exploited Vulnerabilities' catalog, one impacting Google Chrome and two affecting some D-Link routers.
- Bill Toulas
- May 19, 2024
- 10:17 AM
- 0
PoC exploit released for RCE zero-day in D-Link EXO AX4800 routers

The D-Link EXO AX4800 (DIR-X4860) router is vulnerable to remote unauthenticated command execution that could lead to complete device takeovers by attackers with access to the HNAP port.
- Bill Toulas
- May 14, 2024
- 06:10 PM
- 0
Critical RCE bug in 92,000 D-Link NAS devices now exploited in attacks

Attackers are now actively targeting over 92,000 end-of-life D-Link Network Attached Storage (NAS) devices exposed online and unpatched against a critical remote code execution (RCE) zero-day flaw.
- Sergiu Gatlan
- April 08, 2024
- 06:17 PM
- 1
Over 92,000 exposed D-Link NAS devices have a backdoor account

A threat researcher has disclosed a new arbitrary command injection and hardcoded backdoor flaw in multiple end-of-life D-Link Network Attached Storage (NAS) device models.
- Bill Toulas
- April 06, 2024
- 10:16 AM
- 0
D-Link confirms data breach after employee phishing attack

Taiwanese networking equipment manufacturer D-Link confirmed a data breach linked to information stolen from its network and put up for sale on BreachForums earlier this month.
- Sergiu Gatlan
- October 17, 2023
- 02:48 PM
- 0
D-Link WiFi range extender vulnerable to command injection attacks

The popular D-Link DAP-X1860 WiFi 6 range extender is susceptible to a vulnerability allowing DoS (denial of service) attacks and remote command injection.
- Bill Toulas
- October 09, 2023
- 05:53 PM
- 1
D-Link fixes auth bypass and RCE flaws in D-View 8 software

D-Link has fixed two critical-severity vulnerabilities in its D-View 8 network management suite that could allow remote attackers to bypass authentication and execute arbitrary code.
- Bill Toulas
- May 25, 2023
- 12:57 PM
- 0
CISA orders agencies to patch Chrome, D-Link flaws used in attacks

CISA has added 12 more security flaws to its list of bugs exploited in attacks, including two critical D-Link vulnerabilities and two (now-patched) zero-days in Google Chrome and the Photo Station QNAP software.
- Sergiu Gatlan
- September 08, 2022
- 03:11 PM
- 0
Moobot botnet is coming for your unpatched D-Link router

The Mirai malware botnet variant known as 'MooBot' has re-emerged in a new attack wave that started early last month, targeting vulnerable D-Link routers with a mix of old and new exploits.
- Bill Toulas
- September 06, 2022
- 04:40 PM
- 1
D-Link VPN routers get patch for remote command injection bugs

A vulnerability in D-link firmware powering multiple routers with VPN passthrough functionality allows attackers to take full control of the device.
- Ionut Ilascu
- December 08, 2020
- 09:02 AM
- 0
5 severe D-Link router vulnerabilities disclosed, patch now

5 severe D-Link vulnerabilities have been disclosed that could allow an attacker to take complete control over a router without needing to login.
- Ax Sharma
- July 24, 2020
- 08:15 AM
- 1
D-Link leaves severe security bugs in home router unpatched

D-Link has released a firmware update to fix three out of six security vulnerabilities reported for the DIR-865L wireless router model for consumers. One flaw is rated critical, others are high-severity.
- Ionut Ilascu
- June 12, 2020
- 03:19 PM
- 4
Bugs in D-Link and Comba Networking Gear Disclose Passwords

Vulnerabilities found in networking gear from D-Link and Comba allow retrieving sensitive information like ISP credentials and device access passwords without authentication.
- Ionut Ilascu
- September 10, 2019
- 09:57 AM
- 0
D-Link Settles FTC Lawsuit, Promises to Enhance Device Security

Taiwanese networking equipment manufacturer D-Link today settled a Federal Trade Commission (FTC) lawsuit originating from a 2017 complaint saying that it failed to properly secure its Internet-connected cameras and wireless routers.
- Sergiu Gatlan
- July 02, 2019
- 04:14 PM
- 0
Backdoor Account Found in D-Link DIR-620 Routers

Security researchers have found a backdoor account in the firmware of D-Link DIR-620 routers that allows hackers to take over any device reachable via the Internet.
- Catalin Cimpanu
- May 23, 2018
- 09:11 AM
- 2
Second Researcher Drops Router Exploit Code After D-Link Mishandles Bug Reports

Embedi, a hardware security firm, has published details about two vulnerabilities that have yet to be patched in the firmware of D-Link routers. This marks the second incident of this sort in the last five days.
- Catalin Cimpanu
- September 13, 2017
- 06:20 AM
- 1
Researcher Publishes Details on Unpatched D-Link Router Flaws

South Korean security researcher Pierre Kim has published details about ten vulnerabilities he discovered in the firmware of D-Link DIR 850L routers.
- Catalin Cimpanu
- September 09, 2017
- 01:08 PM
- 0
FTC Takes D-Link to Court Because of Insecure Routers and Cameras

The US Federal Trade Commission (FTC) has filed a lawsuit against D-Link, a Taiwanese hardware manufacturer, for misrepresentations about the security of various devices it sold in the US, and for failing to take action and secure devices when security flaws were reported.
- Catalin Cimpanu
- January 06, 2017
- 09:31 AM
- 1