4 articles tagged botnet.
In one 48-hour window: fifteen CISA advisories covering the HVAC controllers, video servers and secure-networking appliances that run modern buildings, and a Shadowserver report putting nearly 300,000 routers and cameras into a botnet that now doubles as a residential proxy network. The two halves are the same story from opposite ends.
Two vulnerabilities in widely deployed industrial and commercial routers are being actively exploited by botnets in May 2026. CVE-2024-9643 in Four-Faith F3x36 Industrial Cellular Routers, scoring 9.8 on CVSS, allows full administrative control without authentication. CVE-2018-5999 in ASUS AsusWRT routers, a vulnerability from 2018, has been re-weaponized by the RondoDox botnet as of May 17, 2026. Both vulnerabilities are being used to build botnet infrastructure, and compromised industrial routers in OT environments create paths from the internet directly into production control systems.
Security researchers have exposed Masjesu, a sophisticated IoT botnet sold as a DDoS-for-hire service on Telegram. It targets routers and gateways across ARM, MIPS, and AMD64 architectures — and has begun extorting smart manufacturing operations.
AI-driven IoT attacks surged 54% in 2026, with autonomous malware that learns, adapts, and evolves faster than human defenders can respond.