GBHackers weekly bulletin lists 50 stories from November 2–6
The roundup's lead blurbs cite bank theft, exploited WordPress and Zyxel flaws, and an Android TV botnet takedown.
Stories per day · 30 days
3 RSS
Relatedgs19009zero-day7rce3switch3buffer-overflow2network-switches2openssh2remote-code-execution2ap1apt1botnet1credential-theft1cwpdoor1firmware1firmware-update1kev1newsletter1out-of-bounds1
17 stories, newest first · one card per story
Stories tagged #zyxel
Weekly recap: OpenSSH SSHole probed, Zyxel zero-day hits switches
Twenty OpenSSH attempts came from 13 IPs, and a Zyxel flaw was used on nearly 1,000 switches.
Hackers Exploit Zyxel GS1900 Zero-Day Vulnerability
Attackers compromised nearly 1,000 Zyxel GS1900 switches via pre-authentication RCE before Zyxel patched the flaw.
Hackers Exploit Zyxel GS1900 Zero-Day in the Wild
Patch for CVE-2026-7273 left switches vulnerable to new CVE-2026-107441 remote root command execution.
Zyxel GS1900 switches and APs hit by out-of-bounds write and buffer overflow
Zyxel security advisory AV26-1114 reports out-of-bounds write in GS1900 series switches and buffer overflow in APs FWA7 Security Routers; users should apply updates.
Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
Weekly roundup leads with a Gyazo breach of 23.6 million users and the TASK#STOMP document-stealing backdoor.
4
Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
A Chinese-linked actor exploited WordPress and Zyxel flaws, stealing government records from dozens of organizations.
Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers
Chinese hackers exploited ZyXEL CVE-2026-7273 on GS1900 switches in 48 countries; CISA added it to KEV.
3
Hackers Exploit WordPress Flaws to Steal 18,566 Government Records and Plaintext Passwords
Chinese-speaking actor exploited WordPress flaws affecting 49 orgs, stealing 18,566 government records including plaintext passwords.
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog
CISA added exploited Zyxel GS1900 switch flaw CVE-2026-7273 to the KEV catalog, with a September 24 fix deadline.
2
CISA orders feds to patch Zyxel flaw exploited for data theft
CISA added actively exploited Zyxel GS1900 flaw CVE-2026-7273 to KEV, ordering federal agencies to patch by Thursday after ~1,000 switches were compromised.
CISA Warns of Zyxel GS1900 Switches Flaw Actively Exploited in Attacks
CISA added exploited Zyxel GS1900 buffer overflow CVE-2026-7273 to KEV, warning of unauthenticated command execution.
Zyxel security advisory (AV26-603) – Update 1
Canada's Cyber Centre says Zyxel GS1900 buffer overflow CVE-2026-7273 is now in CISA's KEV catalog.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Zyxel GS1900 stack buffer overflow CVE-2026-7273 to the Known Exploited Vulnerabilities catalog.
Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation
GreyNoise tracks 'Red Heron' actor exploiting multiple vulnerabilities including novel ZyXEL CVE-2026-7273 and stealing 18,000+ government records.
Home & Small Office Wireless Routers Exploited to Attack Gaming Servers
Unit 42 details an updated Gafgyt botnet variant exploiting Zyxel, Huawei, and Realtek router vulnerabilities to recruit devices for DoS attacks on gaming servers.
Old Wine in the New Bottle: Mirai Variant Targets Multiple IoT Devices
Unit 42 analyzed the Mirai IZ1H9 botnet variant exploiting Tenda, LB-Link, DCN and Zyxel flaws to build DDoS-capable IoT botnets.