Weekly recap: OpenSSH SSHole probed, Zyxel zero-day hits switches
Twenty OpenSSH attempts came from 13 IPs, and a Zyxel flaw was used on nearly 1,000 switches.
74
- Mentions · 7d2
- Mentions · 30d2
- All mentions3
- First seenAug 12, 2026
- Last mentioned2h ago
Timeline
3 articles · newest firstHackers Deploy CWPdoor Backdoor via Trojanized CWP Server
A new Linux malware called CWPdoor is distributed through trojanized versions of cwpsrv in the Control Web Panel web server, affecting over 340,000 exposed instances.
65
Kimwolf v7 Hides DDoS Traffic Behind Chrome Fingerprints and Ethereum
Unit 42 details Kimwolf v7, an Android TV botnet upgrade using HTTP/2 Chrome-fingerprint DDoS floods and Ethereum ENS-based C2 across 1.8M+ infected devices.
55
Related CVEs
by mentions- Out-of-bounds write in Zyxel GS1900-24E CGI up to 2.90(AAHK.2)C0
- CVE-2026-1231581%8.1Password bypass in OpenSSH before 10.6p2 on musl without PAM
- CVE-2026-109518<1%7.7Man-in-the-middle RCE in APT on Debian and Ubuntu
Appears with
- CWPdoormalware · 2
- Amazonorganization · 1
- Red Heronthreat actor · 1
- cwpsrvproduct · 1
- OPSSHIELDvendor · 1
- AISURUmalware · 1
- Unit 42organization · 1
- mSeven Softwarevendor · 1
- QiAnXin Technology Grouporganization · 1
- Crafty Falconthreat actor · 1
- Kapibalathreat actor · 1
- CERT-Inorganization · 1
- Zyxelvendor · 1
- GS1900product · 1
- JITTERLYmalware · 1
- OpenSSHproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.