Classed as an improper input validation (CWE-20) bug, the flaw with an 8.9 severity score is underpinned by a lack of input ...

Threat intelligence outfit GreyNoise has reported a “notable surge” in the number of malicious scans for systems running Progress’ MOVEit Secure Managed File Transfer software.

Threat intelligence firm GreyNoise is warning of a "notable surge" in scanning activity targeting Progress MOVEit Transfer systems starting May 27, 2025—suggesting that attackers may be preparing for ...

CISA adds 3 critical vulnerabilities to KEV catalog, affecting AMI MegaRAC, D-Link, and Fortinet, urging mitigations by July ...

Notably, Asus stated that it had already been developing firmware updates for the vulnerability – well before GreyNoise's public disclosure – including for models like the RT-AX55.

Actually disclosed in 2023 as recorded in the company's Product Security Advisory, the flaw's entry is dated Nov. 3, 2023, and is listed as "RT-AX55 security update notice for CVE-2023-41345, CVE-2023 ...

A 'well-resourced and highly capable adversary' gains unauthorized access to 9,000 routers, likely trying to infect them with ...

GreyNoise also recommends checking whether SSH access to the TCP/53282 port has been permitted on your own Asus routers. Unauthorized entries should also be searched for in the "authorized_keys" file.

GreyNoise, a threat monitoring company, has discovered a botnet named AyySSHush. According to Censys search, there are more than 8,000 infected hosts, and thousands of these are ASUS routers.

A GreyNoise report on the hack said: "The techniques used reflect long-term access planning and a high level of system knowledge." Government authorities were notified of the hack shortly after it ...

GreyNoise reported that, as of May 27, nearly 9,000 routers were confirmed compromised. The company is pulling that data from Censys, which keeps tabs on internet-facing devices throughout the world.

GreyNoise said its in-house AI tool, SIFT, flagged suspicious traffic aimed at disabling and exploiting a TrendMicro-powered security feature, AiProtection, enabled by default on Asus routers.