Zyxel Patches Zero-Day Exploited Against Nearly 1,000 Switches

· Cybersecurity

Zyxel patched a zero-day vulnerability in its GS1900 series network switches that attackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. The flaw allowed attackers to access switch configuration data and credentials, which could be used for further intrusion into affected networks. Zyxel released the fix after confirming active exploitation. The scale—nearly 1,000 devices—makes this a significant supply-chain-adjacent event for network infrastructure, and administrators of GS1900 switches should apply the update promptly and consider rotating any credentials stored on the devices.

Why it matters：Network switches sit at the core of enterprise infrastructure, so a mass-exploited zero-day in widely deployed models affects thousands of organizations' network security posture.

Key points

  • The zero-day affects Zyxel GS1900 series network switches.
  • Attackers compromised nearly 1,000 devices and stole configuration files and credentials.
  • Zyxel has released a patch.

Sources (original reporting)

More stories from this day