OpenWrt

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 19, 2026
Last mentionedSep 11, 2026

Timeline

3 articles · newest first

New KATARU IoT Malware Packs Linux Privilege Escalation Exploits and Mirai-Style DDoS Attacks

Nozomi Networks identified KATARU, a new Mirai-style IoT botnet delivered via Telnet brute force that uses Linux privilege-escalation exploits and encrypted C2 for DDoS floods.

Cyber Security NewsSep 11, 14:17 UTC · Sep 11, 2026MalwareExploitedCVE-2026-46300 CVE-2026-43284 CVE-2026-314313 · 1 read

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

FBI and Lumen disrupted QTFY's QScan and QTRouter botnet platforms used by Chinese state-sponsored hackers to conceal intrusions into U.S. agencies.

The Hacker NewsSep 2, 06:26 UTC · Sep 2, 2026Threat actorExploitedCVE-2018-13379 CVE-2019-10068 CVE-2019-19781+106 · 1 read

Risks in IoT Supply Chain

Unit 42 analyzes multilayer IoT supply chain risks across hardware, firmware, and software, citing counterfeit Cisco switches and OpenWrt attacks.

Palo Alto Unit 42Aug 19, 12:05 UTC · Aug 19, 2026Research2 · 1 read

Related CVEs

by mentions

CVE-2021-44228100%10.0
JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
published Dec 10, 2021Apache Log4j2KEVRansomwarePoC ×9
CVE-2020-5902100%9.8
Unauthenticated RCE via path traversal in F5 BIG-IP TMUI
published Jul 1, 2020F5 BIG-IPKEVRansomwarePoC ×8
CVE-2025-31161100%9.8
Authentication Bypass in CrushFTP File Transfer Servers (CVE-2025-31161)
published Apr 3, 2025CrushFTPKEVRansomwarePoC ×5
CVE-2018-13379100%9.8
Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN
published Jun 4, 2019Fortinet FortiOSKEVRansomware
CVE-2021-26855100%9.1
Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)
published Mar 3, 2021Microsoft Exchange ServerKEVRansomwarePoC ×4
CVE-2024-896399%9.1
Unauthenticated Path Traversal in Ivanti Cloud Services Appliance
published Sep 19, 2024Ivanti Cloud Services Appliance (CSA)KEV
CVE-2024-24919100%8.6
Information Disclosure in Internet-Facing Check Point Quantum Security Gateways
published May 28, 2024Check Point Quantum Security GatewaysKEVRansomware
CVE-2024-938058%7.2
OS Command Injection RCE in Ivanti Cloud Services Appliance Admin Console
published Oct 8, 2024Ivanti Endpoint Manager Cloud Services Appliance (CSA)KEV
CVE-2024-819089%7.2
OS Command Injection RCE in Ivanti Cloud Services Appliance 4.6
published Sep 10, 2024Ivanti Cloud Services ApplianceKEV
CVE-2026-4328494%8.8
Linux kernel ESP-in-UDP decrypts in place over shared splice pages (CWE-123)
published May 8, 2026Linux kernelPoC

Appears with

Federal Reservevictim · 1
Department of Justiceorganization · 1
People's Liberation Armyorganization · 1
Fortinetvendor · 1
Apachevendor · 1
Ciscovendor · 1
QTBotnetmalware · 1
TeamViewervendor · 1
BeyondTrustvendor · 1
Catalyst 2960-Xproduct · 1
Citrixvendor · 1
QScanproduct · 1
KATARUmalware · 1
FBIorganization · 1
BusyBoxproduct · 1
Ministry of State Securityorganization · 1

Entities are extracted by the model from each article. First seen Aug 19, 2026, last mentioned Sep 11, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.