Latest Router news

D-Link blunder: Firmware encryption key exposed in unencrypted image

The router manufacturer leaks encryption keys in some firmware versions letting reverse engineers decrypt the latest firmware images.
- Ax Sharma
- July 22, 2020
- 12:01 PM
- 4
Cisco fixes critical pre-auth flaws allowing router takeover

Cisco today has released security updates to address critical remote code execution (RCE), authentication bypass, and static default credential vulnerabilities affecting multiple router and firewall devices that could lead to full device takeover.
- Sergiu Gatlan
- July 15, 2020
- 01:26 PM
- 0
79 Netgear router models risk full takeover due to unpatched bug

An unpatched zero-day vulnerability exists in 79 Netgear router models that allow an attacker to take full control over vulnerable devices remotely.
- Lawrence Abrams
- June 18, 2020
- 12:31 PM
- 5
D-Link leaves severe security bugs in home router unpatched

D-Link has released a firmware update to fix three out of six security vulnerabilities reported for the DIR-865L wireless router model for consumers. One flaw is rated critical, others are high-severity.
- Ionut Ilascu
- June 12, 2020
- 03:19 PM
- 4
Hackers Hijack Routers’ DNS to Spread Malicious COVID-19 Apps

A new cyber attack is hijacking router's DNS settings so that web browsers display alerts for a fake COVID-19 information app from the World Health Organization that is the Vidar information-stealing malware.
- Lawrence Abrams
- March 23, 2020
- 06:33 PM
- 6
Cisco Patches Critical CDP Flaws Affecting Millions of Devices

Five critical vulnerabilities found in various implementations of the Cisco Discovery Protocol (CDP) could allow attackers on the local network to take over tens of millions of enterprise devices as discovered by IoT security company Armis.
- Sergiu Gatlan
- February 05, 2020
- 02:36 PM
- 0
New Mozi P2P Botnet Takes Over Netgear, D-Link, Huawei Routers

Netgear, D-Link, and Huawei routers are actively being probed for weak Telnet passwords and taken over by a new peer-to-peer (P2P) botnet dubbed Mozi and related to the Gafgyt malware as it reuses some of its code.
- Sergiu Gatlan
- December 23, 2019
- 10:17 AM
- 0
TP-Link Router Bug Lets Attackers Login Without Passwords

TP-Link patched a critical vulnerability impacting some of its Archer routers that could allow potential attackers to void their admin passwords and remotely take control of the devices over LAN via a Telnet connection.
- Sergiu Gatlan
- December 16, 2019
- 05:00 PM
- 0
New Gafgyt Variant Recruits Routers to DDoS Servers for Valve Games

A new version of Gafgyt botnet malware has been enlisting routers from Zyxel and Huawei, as well as devices with Realtek RTL81xx chipset, using them for denial-of-service (DoS) attacks against servers running the Valve Source engine.
- Ionut Ilascu
- October 31, 2019
- 09:29 AM
- 0
Cisco Fixes Critical IOx Flaw Allowing Root Access to Guest OS

Cisco has released security updates to address a critical vulnerability in the IOx application environment for Cisco IOS Software that could enable authenticated remote attackers to access the Guest Operating System (Guest OS) as the root user.
- Sergiu Gatlan
- September 26, 2019
- 11:25 AM
- 0
Bugs in D-Link and Comba Networking Gear Disclose Passwords

Vulnerabilities found in networking gear from D-Link and Comba allow retrieving sensitive information like ISP credentials and device access passwords without authentication.
- Ionut Ilascu
- September 10, 2019
- 09:57 AM
- 0
Router Network Isolation Broken By Covert Data Exfiltration

Software-based network isolation provided by routers is not as efficient as believed, as hackers can smuggle data between the networks for exfiltration.
- Ionut Ilascu
- August 18, 2019
- 01:14 PM
- 0
4G Router Vulnerabilities Let Attackers Take Full Control

Multiple vulnerabilities were found by security researchers in 4G routers manufactured by several companies, with the flaws exposing users to information leaks and command execution attacks.
- Sergiu Gatlan
- August 12, 2019
- 03:11 PM
- 0
Linksys Smart Wi-Fi Routers Leak Info of Connected Devices

More than 25,000 Linksys Smart Wi-Fi routers are currently impacted by an information disclosure vulnerability which allows remote and unauthenticated access to a vast array of sensitive device information.
- Sergiu Gatlan
- May 13, 2019
- 03:20 PM
- 5
Zero-Day TP-Link SR20 Router Vulnerability Disclosed by Google Dev

TP-Link's SR20 Smart Home Router is impacted by a zero-day arbitrary code execution (ACE) vulnerability which allows potential attackers on the same network to execute arbitrary commands as disclosed on Twitter by Google security developer Matthew Garrett.
- Sergiu Gatlan
- March 28, 2019
- 05:31 PM
- 0
Unpatched UPnP-Enabled Devices Left Exposed to Attacks

Outdated software on UPnP-enabled devices exposes them to attacks designed to exploit a wide range of vulnerabilities found in UPnP libraries used by various daemons and servers reachable over the Internet.
- Sergiu Gatlan
- March 06, 2019
- 05:47 PM
- 0
Cisco Fixes Critical RCE Vulnerability in RV110W, RV130W, and RV215W Routers

Cisco fixed a critical remote code execution vulnerability present in the web-based management interface of the RV110W Wireless-N VPN Firewall, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router.
- Sergiu Gatlan
- February 28, 2019
- 12:57 PM
- 0
New Reports Show Increased CyberThreats, User Risks Remain High

Two new reports from eSentire and Proofpoint show that that as online threats remain an issue, user security leaves much to be desired. The mismatch between the danger of cyberthreats and lack of user readiness could leave individuals or businesses at risk of serious losses to data or property.
- Ian Edwards
- October 10, 2018
- 12:00 AM
- 1
Massive Coinhive Cryptojacking Campaign Touches Over 200,000 MikroTik Routers

Security researchers have unearthed a massive cryptojacking campaign that targets MikroTik routers and changes their configuration to inject a copy of the Coinhive in-browser cryptocurrency mining script in some parts of users' web traffic.
- Catalin Cimpanu
- August 02, 2018
- 04:37 AM
- 0
Router Crapfest: Malware Author Builds 18,000-Strong Botnet in a Day

A malware author has built a huge botnet comprised of over 18,000 routers in the span of only one day.
- Catalin Cimpanu
- July 19, 2018
- 07:33 AM
- 0