The Hacker News پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۰:۳۶

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management interface run commands on it without logging in. Zyxel has released new firmware for 10 GS1900 models that closes the hole. The earlier fix is the 2.90

Vulnerabilities & Zero-Day IoT & OT Security

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CSO Online پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۳:۱۴

Zyxel patches a zero-day hiding behind an old fix

Zyxel has patched a zero-day vulnerability that attackers exploited to compromise 996 GS1900 network switches across 48 countries, exposing device configurations, network information and hashed root credentials. The attack began around August 17, according to cybersecurity firm GreyNoise, but researchers initially blamed a different vulnerability that Zyxel had already addressed. The newly identified flaw, tracked as…

Vulnerabilities & Zero-Day IoT & OT Security Networking & Internet

Source

The Hacker News پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۲:۴۳

Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content

Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3. The change specifically applies to scenarios where users share iCloud content, such as photos in iCloud Photos or files in iCloud Drive, by sharing a link and making it accessible to "Anyone with the link." When users choose this option,

Mobile Development Operating Systems

Source

Help Net Security پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۲:۳۵

OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run

An automated system running on an upcoming AI model turned hundreds of Linux kernel bugs into working exploits that give an ordinary user root access, and wrote a patch for each underlying flaw, OpenAI revealed in a new research post. Source:OpenAI The company’s Cyber team ran the pipeline in mid-October 2026 against the latest Linux kernel, with target machines running a stock desktop operating system from a commonl…

Vulnerabilities & Zero-Day Operating Systems

Source

The Hacker News پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۲:۱۲

CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access

The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country. Describing the threat as active and ongoing, the activity involves the use of publicly-available AI-driven offensive security tools

AI Security Threat Intelligence AI & Machine Learning

Source