Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
2026-10-15T19:23:22Z•b0e946aa3904e64f51a46f28bd34364ecfc43c2acad1562fef5d914c66f39efe
CVE-2026-0322Arch User RepositoryCisco Secure Email GatewayD-LinkDPRK threat activityIvanti Connect SecurePAN-OSUbiquitiactive exploitationdata breachmalwarenetwork appliancesphishingproxyjackingrcesupply-chain attackvulnerability managementzero-day
What happened
A BleepingComputer security-news feed covering active exploitation of enterprise security appliances, including a PAN-OS RCE zero-day (CVE-2026-0322), a Cisco Secure Email Gateway zero-day enabling unauthenticated root command execution, and an Ivanti Connect Secure flaw exploited since October 1. Other items include proxyjacking of D-Link and Ubiquiti devices across 34 countries, malicious Arch User Repository packages with root privileges, major data theft from the UK Legal Aid Agency, a Ledger supply-chain tampering investigation, a global phishing-network takedown, and DPRK remote IT-worke
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- b0e946aa3904e64f51a46f28bd34364ecfc43c2acad1562fef5d914c66f39efe
- Enrichment time
- 2026-10-15T19:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.