Hackers Deploy Linux Rootkit on F5 BIG-IP APM Devices
A Linux rootkit targets F5 BIG-IP APM devices by injecting fileless web shells into memory through PHP file loading interception, complicating detection.
Tag
#Network Security
12 results in the archive.
Critical MikroTik SSH Bypass Exploited - Patch Immediately
MikroTik released a patch for an SSH authentication bypass vulnerability currently exploited to create unauthorized accounts on devices.
New 'Ted' Backdoor Hides in HAProxy to Intercept Web Traffic
A Linux backdoor named 'Ted' has been found in trojanized HAProxy builds at South Korean organizations, intercepting and modifying web traffic while requiring prior code execution on the host.
Critical Cisco Nexus 9000 Flaw Lets Remote Attackers Run Code as Root
Cisco released a patch for a critical vulnerability in Silicon One-based Nexus 9000 switches that allows unauthenticated remote code execution as root, identified as CVE-2026-20212 with a 9.8 CVSS score.
China-Linked Fire Ant Targets Cisco Routers to Steal Credentials
The China-linked Fire Ant group has compromised Cisco IOS XR routers, TACACS servers, and Linux hosts to steal credentials and disable security logs, targeting critical network infrastructure.
New Evooo1Bot Linux Botnet Turns Routers into Traffic Relays
Evooo1Bot is a new Mirai-based Linux botnet targeting internet-facing routers to convert them into SOCKS5 traffic relay nodes, expanding attack surfaces.
Cisco Warns of High-Severity VPN Flaw Actively Exploited to Crash Devices
Cisco alerts on a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense VPN software actively exploited to crash devices, threatening enterprise network stability.
Cisco Patches 12 Critical SD-WAN and IOS XE Vulnerabilities
Cisco released patches for 12 critical vulnerabilities in Catalyst SD-WAN and IOS XE software impacting devices in all configurations.
Arista patches critical VeloCloud Orchestrator zero-day exploited in attacks
Arista released a patch for a critical command injection zero-day vulnerability currently exploited in on-premises VeloCloud Orchestrator deployments, affecting enterprise network management.
Critical OpenWrt DHCPv6 Flaw Lets Attackers Execute Code as Root
A critical DHCPv6 stack overflow vulnerability in OpenWrt's default network service odhcpd allows unauthenticated remote root code execution.
SonicWall alerts on critical SMA1000 zero-day flaws in active attacks
SonicWall disclosed two critical zero-day vulnerabilities in SMA1000 devices being exploited in active attacks, highlighting urgent risk to enterprise network security.
Russian FSB Exploits Vulnerable Routers in Critical Infrastructure Sectors
Russian state-sponsored hackers from FSB Center 16 are exploiting poorly configured routers in critical infrastructure worldwide, heightening operational risks.