Threat Source newsletter (Jan. 21, 2021)
Summary: Cisco Talos reported that researchers found a webshell called BumbleBee used in an espionage campaign against Microsoft Exchange servers at organizations in Kuwait, with the xHunt group using it to execute commands and upload and download files since at least September. Cisco also disclosed 74 vulnerabilities in its end-of-life Small Business RV110W, RV130, RV130W and RV215W routers, urging users to buy new hardware rather than patch, and noted all the flaws require an attacker to hold login credentials for the device.
What's compelling: Seventy-four flaws in hardware Cisco says should be replaced rather than patched leave every organization still running those RV-series routers deciding between a budget line and a device that will never receive a fix.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026