Zyxel firewall flaw

For smaller organisations updating network devices is often overlooked. CISA is warning of a flaw in Zyxel firewalls that is being actively exploited by hackers even though the vendor issued patches for the vulnerability over a month ago!

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

My advice: Either you or your IT support need to check whether these issues impact your systems. You need to have a master document that details your systems, hardware, software, online, networks, back-ups, suppliers etc – so when cyber security (or operational) issues arise you and your support teams can quickly check if you are affected. From there you can take fast, effective action.

CISA also releases industrial control system advisories – if you are responsible for these types of systems you should monitor their news page:

Current Activity | CISA

Clive Catton MSc (Cyber Security) – by-line and other articles

Further Reading

Hackers exploit critical Zyxel firewall flaw in ongoing attacks (bleepingcomputer.com)