GreyNoise

Hackers exploit Zyxel GS1900 zero-day to compromise nearly 1,000 switches

A pre-authentication remote code execution zero-day in Zyxel◼ GS1900 switches was exploited before Zyxel patched it. Binarly◼ found the exploit used a previously unknown bug, not the one Zyxel fixed in June. GreyNoise◼ reported that around 17 August an actor exploited 996 GS1900 switches across 48 countries.