
Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks
Actor skynox7 exploited D-Link, Ubiquiti, and SAP flaws to proxyjack 143 devices.
11 stories, newest first · one card per story

Actor skynox7 exploited D-Link, Ubiquiti, and SAP flaws to proxyjack 143 devices.

GreyNoise says attackers exploited NAS, NVR, and SAP flaws to install Pawns.app on 143 devices.

GreyNoise found attackers exploiting edge-device flaws in 34 countries to install Pawns.app and resell bandwidth.

Canada's Cyber Centre warns of vulnerabilities in multiple Ubiquiti UniFi gateways, routers, and firewalls and urges updates.

A Chinese-linked actor exploited WordPress and Zyxel flaws, stealing government records from dozens of organizations.

Ubiquiti disclosed CVE-2026-34908, a CVSS 10.0 authentication bypass in UniFi OS letting network-adjacent attackers alter device configuration without credentials.

CVE-2026-34908, a CVSS 10.0 access-control bypass in Ubiquiti UniFi OS, was added to CISA's KEV catalog amid reported active exploitation.

Troy Hunt's weekly update mentions new breach data dumps, IoT door lock research, and conference preparations.
Ubiquiti UniFi OS flaws CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 were added to CISA's KEV, chaining auth bypass into command injection.

Ubiquiti patches 22 UniFi vulnerabilities, 21 rated critical including three CVSS 10.0 flaws enabling unauthorized access.
Canada's Cyber Centre reports critical vulnerabilities across Ubiquiti UniFi products including UniFi OS Server, Network, Protect, and Access; updates required.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views