Search: “degradation”

30 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 152 Ransomware 114 Industry 102 Malware 95 Policy & legal 86 Exploit / PoC 79 Threat actor 66 Data breach 54 AI research 44 AI safety & security 31 Research 27 Phishing & fraud 23 AI tools & infra 21 AI industry 11

SeverityAll critical 384 high 142 medium 129 low 153 info 116

Home & Small Office Wireless Routers Exploited to Attack Gaming Servers

Unit 42 details an updated Gafgyt botnet variant exploiting Zyxel, Huawei, and Realtek router vulnerabilities to recruit devices for DoS attacks on gaming servers.

Unit 42 researchers identified an updated Gafgyt variant derived from the JenX botnet that combines three remote code execution exploits: CVE-2017-18368 (Zyxel P660HN-T1A), CVE-2017-17215 (Huawei HG532), and CVE-2014-8361 (Realtek RTL81XX chipset). Shodan scans show more than 32,000 wireless routers worldwide potentially vulnerable to these exploits. The exploits act as droppers, pulling architecture-specific binaries from a malicious server (185.172.110.224), and the botnet performs denial-of-service attacks against gaming servers, most notably Valve Source engine servers.

Palo Alto Unit 42Aug 18, 04:46 UTC · Aug 18, 2026Malware in the wildCVE-2017-18368 CVE-2017-17215 CVE-2014-83611

FBI Seizes NetNut Proxy Platform, Popa Botnet

Krebs on SecurityJul 2, 20:10 UTC · Jul 2, 2026Malware

Combatting emerging-malware aimed at industrial control systems

CyberScoopApr 28, 19:49 UTC · Apr 28, 2022Malware

What is flowing through your enterprise network?

Help Net SecurityMay 28, 11:21 UTC · May 28, 2020Malware

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

US and European authorities with CrowdStrike dismantled the two-decade-old Sality P2P botnet using peer-list manipulation, blocking payload delivery to infected hosts.

The US Department of Justice announced a coordinated takedown of the Sality peer-to-peer botnet, executed August 31, 2026 by authorities from the US, Bulgaria, Hungary, and Romania with CrowdStrike and the Shadowserver Foundation. Sality, active since 2003, infects Windows executables and delivers payloads including the EggJagger crypto clipper, which stole at least $150,000, and was used for DDoS campaigns. The operation abused the botnet's peer-list maintenance cycle to insert sinkhole nodes and isolate both super peers and NAT-hidden infections, cutting off URL and payload distribution to more than 15,000 infected machines across two P2P networks.