At this point, the admin is usually forced to disable the device altogether. Even worse, these loopholes can be challenging to detect, and if you manage to uncover them, fixing them becomes another headache. Unfortunately, these credentials can create a significant loophole, which cybercriminals can leverage to bypass the authentication configured by the administrator. As you may be aware, these devices usually contain hard-coded credentials such as cryptographic keys and passwords, which are necessary for the encryption of internal data, outbound communication with external components, and inbound authentication. The recent trends suggest that attackers are using hard-coded accounts to access Zyxel devices remotely. And until the company fixes this vulnerability 100%, cybercriminals will continue trying to access the targeted devices in these two ways: The company notes that it discovered a critical vulnerability in its ZLD firmware, which the threat actors have been leveraging to compromise the targeted devices. Zyxel firewalls and VPNs have been under active cyberattacks, with threat actors mainly targeting organizations using devices with remote management or SSL VPN enabled. So let’s get this show on the road, shall we? How are Threat Actors Attempting to Illegitimately Access Zyxel Firewalls and VPNs? What actions should you take when you notice a security breach on Zyxel your device?.How can you tell if your firewall has been compromised?.How do threat actors attempt to access Zyxel devices?.We’ve prepared this eye-opener post to answer the following critical security questions regarding Zyxel devices:

In particular, the most targeted organizations are those using Zyxel Unified Security Gateway (USG) & ZyWALL, USG FLEX, ATP, and VPN series.

The network device manufacturer has recently reported widespread exploitation of its products by threat actors, causing a bit of tension among its customers. Addressing the Recent Security Threat Targeting Zyxel Productsĭoes your organization use any of the Zyxel security appliances or VPN devices? If the answer is YES, this post is for you.

Zyxel firmware modification