#router


⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Sep 7, 2026 // 17:42

Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It […]

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

Aug 31, 2026 // 20:52

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems […]

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

Aug 10, 2026 // 18:40

A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting […]

Hidden backdoor in Tenda router firmware grants admin access

Jul 7, 2026 // 20:37

A hidden authentication backdoor has been found in multiple Tenda router firmware versions, potentially allowing an attacker to gain administrative access to the device’s web […]

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Jul 7, 2026 // 09:50

Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to […]

C0XMO botnet spreads via DD-WRT router flaw, kills rival malware

Jun 7, 2026 // 17:36

A new variant of the Gafgyt botnet called C0XMO is targeting DD-WRT router firmware and can move to other device types with various CPU architectures. […]

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

May 25, 2026 // 19:10

Monday recap. Same mess, new week. A sketchy dev tool got people pwned, old bugs came back from the dead, and security products somehow needed […]

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories

May 21, 2026 // 14:58

This week starts small. A token leaks. A bad package slips in. A login trick works. An old tool shows up again. At first, it […]

APT28 (Russia) hijacks global DNS via SOHO router exploits.

Apr 8, 2026 // 01:03

A Russian hacking group, APT28 (also known as Forest Blizzard), is suspected of running a new campaign. They infiltrated vulnerable MikroTik and TP-Link routers, changing […]

Authorities halt router attacks redirecting DNS to capture Microsoft 365 credentials.

Apr 7, 2026 // 18:57

An international effort involving law enforcement and private companies has stopped FrostArmada, an APT28 operation that hijacked local traffic from MikroTik and TP-Link routers to […]