Zyxel 취약점 악용돼 데이터 탈취

CISA는 Zyxel GS1900 스위치의 취약점 CVE-2026-7273을 알려진 악용 취약점 목록에 추가했다. 해당 취약점은 패치가 제공된 상태라고 보도됐다.

SecurityWeek는 중국 해킹 조직이 취약점을 이용해 정보를 빼냈다고 보도했다. BleepingComputer는 중국어권 공격자가 Zyxel과 WordPress를 악용했다고 전했으며, CISA는 연방기관에 패치를 지시했다.

1. 09:00

   CISA가 Zyxel GS1900 취약점을 알려진 악용 취약점 목록에 추가했다고 보도됐다.

   Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
2. 09:00

   CISA가 연방기관에 취약점 패치를 지시했다고 보도됐다.

   CISA orders feds to patch Zyxel flaw exploited for data theft
3. 09:00

   SecurityWeek가 공격자의 정보 탈취와 영향 범위를 보도했다.

   Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers
4. 09:00

   BleepingComputer가 Zyxel과 WordPress 취약점 악용 및 기록 탈취를 보도했다.

   Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

• The Hacker NewsKiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown9월 29일 23:13
• TechCrunchStill running iOS 26? Update your iPhones, iPads and Macs for this urgent security fix9월 29일 22:25
• Hacker NewsKestra Unauthenticated Remote Code Execution CVE-2026-498699월 29일 21:07
• Hacker NewsMCP Python SDK OAuth flaw enabled account takeover9월 29일 19:22
• BleepingComputerKiteworks patches critical flaw, brings customer systems online9월 29일 18:04
• BleepingComputerApple patches CoreGraphics zero-day flaw exploited in attacks9월 29일 16:33
• Hacker NewsCVE-2026-85706 (CVSS 10.0)9월 29일 15:36
• SecurityWeekApple Patches Zero-Day Linked to ‘Extremely Sophisticated Attack’9월 29일 15:18
• The Hacker NewsOfficial MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials9월 29일 15:08
• Hacker NewsTaking 'execute logging' a bit too literally CVE-2026-887719월 29일 08:06
• The Hacker NewsApple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks9월 29일 04:18
• Hacker NewsElastic Agentic SOC Vulnerable to Credential Theft9월 29일 02:36
• Hacker NewsActive, in-the-wild exploitation of CVE-2026-88771 with IoCs9월 29일 01:21
• The RecordUS, UK warn of exploited Citrix NetScaler zero-day bugs9월 29일 01:19
• Hacker NewsCitrix NetScaler PreAuth Command Injection CVE-2026-887719월 29일 00:21
• Hacker NewsOne resident login, an entire apartment complex: CVE-2026-759609월 28일 22:51
• SecurityWeekKiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability9월 28일 18:44
• Hacker NewsI found an SSRF in Google's official MCP Toolbox (CVE-2026-14540)9월 28일 16:36
• SecurityWeekCitrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug9월 28일 16:29
• The Hacker NewsCISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally9월 28일 16:21
• BleepingComputerCISA orders feds to patch exploited Citrix flaws by Wednesday9월 28일 15:24
• Hacker NewsCitrix NetScaler Remote Code Execution9월 28일 05:51
• BleepingComputerCitrix confirms two NetScaler RCE zero-days exploited in attacks9월 28일 01:02
• SecurityWeekMicrosoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks9월 27일 18:23
• The Hacker NewsWarning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation9월 27일 16:47
• Hacker NewsSix Bazel patches from an AI software factory, plus a remote-cache security bug9월 27일 02:54
• The Hacker NewsAttackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells9월 26일 20:46
• The Hacker NewsSharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild9월 26일 17:49
• BleepingComputerCISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks9월 26일 02:24
• Hacker NewsSomeone's attacking a critical 0-day RCE in F5 BIG-IP APM9월 26일 00:10
• Hacker NewsImminent Zero-Day Attack: KiteWorks Urges Customers to Shut Down Servers9월 25일 22:50
• Hacker NewsThe "FREAK" TLS/SSL flaw, and related thoughts9월 25일 21:49
• SecurityWeek‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration9월 25일 18:27
• Hacker NewsCVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 29월 25일 16:08
• The Hacker NewsWSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV9월 25일 13:46
• Hacker NewsVulnerability Cve-2026-829589월 25일 13:45
• Hacker NewsDecades-old file security flaws found in Android, Linux, macOS, and Windows9월 25일 04:05
• Hacker NewsCISA active Linux kernel CVEs (CVE-2025-39964, CVE-2026-53266, CVE-2025-39682)9월 25일 02:00
• BleepingComputerHackers now exploit critical Roundcube flaw in code injection attacks9월 24일 22:27
• BleepingComputerCISA: Ransomware gangs now exploiting critical TeamCity flaw9월 24일 19:42
• SecurityWeekSolarWinds Patches Critical RCE Flaws in Observability Self-Hosted9월 24일 19:40
• Hacker NewsHackers Actively Exploit Check Point VPN Flaw9월 24일 11:11
• BleepingComputerCheck Point warns of hackers exploiting Security Gateway VPN RCE flaw9월 24일 04:53
• The Hacker NewsMikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key9월 24일 01:06
• BleepingComputerInfraTrust report warns network management systems under attack9월 23일 23:35
• Hacker NewsLatest BGP hijack targets hosting software vendor9월 23일 21:30
• BleepingComputerArista patches actively exploited VeloCloud Orchestrator zero-day9월 23일 21:29
• SecurityWeekAdobe Patches Critical Flaws in Connect, AEM Forms9월 23일 20:40
• SecurityWeekArista Urges Immediate Patching of Exploited VCO Zero-Day9월 23일 17:33
• The Hacker NewsF5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers9월 23일 17:29
• The Hacker NewsChinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware9월 23일 17:29
• SecurityWeekCritical F5 BIG-IP Vulnerability Exploited as Zero-Day9월 23일 16:34
• BleepingComputerF5 patches BIG-IP APM zero-day flaw exploited in RCE attacks9월 23일 16:17
• SecurityWeekCheck Point Patches Exploited Management Server Zero-Day9월 23일 15:14
• BleepingComputerChinese hackers exploit WordPress, Zyxel flaws to steal govt data9월 23일 05:35
• The Hacker NewsCheck Point Warns of Management Server Zero-Day Exploited in Targeted Attacks9월 23일 03:29
• The Hacker NewsCritical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials9월 23일 01:41
• BleepingComputerCheck Point warns of Management Server zero-day exploited in attacks9월 23일 01:32
• BleepingComputerD-Link warns of max severity zero-day bug in DIR-822A routers9월 22일 21:48
• The Hacker NewsNew CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups9월 22일 21:29
• SecurityWeekRecent ZyXEL Switch Vulnerability Exploited by Chinese Hackers9월 22일 20:55
• BleepingComputerCISA orders feds to patch Zyxel flaw exploited for data theft9월 22일 17:53
• The Hacker NewsZyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access9월 22일 14:31
• BleepingComputerCISA alerts of active exploitation of three Linux kernel flaws9월 22일 05:12