Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

Zyxel released a patch for a zero-day vulnerability affecting its GS1900 series network switches. Threat actors actively exploited this flaw to compromise nearly 1,000 devices globally. The attackers were able to steal configuration files and credentials from the compromised switches. The vulnerability was present before a patch was made available, classifying it as a zero-day. The incident highlights the ongoing risk of network infrastructure devices being targeted by attackers. Organizations using GS1900 series switches are urged to apply the patch immediately. The theft of configuration files and credentials could enable further lateral movement or persistent access in affected networks.