Daily Brief
active exploits and supply-chain breaches
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
Zyxel has patched a zero-day in its GS1900 series switches after hackers used it to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. It matters because network gear often sits outside normal monitoring, leaving attackers with durable access and sensitive device data.
Inventory GS1900 switches and confirm they are patched; if not, isolate them and review for unexpected config changes and credential exposure.
CISA flags WordPress RCE flaw as actively exploited in attacks
CISA says attackers are actively exploiting a recently patched high-severity WordPress vulnerability and has added it to its known-exploited list. That makes it an immediate priority for any organisation running WordPress, especially where public sites can be used as an entry point.
Patch WordPress core now and check exposed sites for signs of compromise, including unexpected files, plugins, or admin accounts.