CISA ORDERS FEDS TO PATCH ZYXEL SWITCH FLAW

SECURITY DESK■ 1 MIN READ

WED, SEP 23, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive ordering federal agencies to patch a high-severity vulnerability in Zyxel GS1900 series switches. Attackers are actively exploiting the flaw to steal data.

CISA classified the Zyxel vulnerability as a known exploited threat, triggering mandatory patching requirements for federal civilian agencies with a deadline of 21 days. The GS1900 series switches are widely deployed across networks as managed layer-2 devices. The vulnerability allows attackers to gain unauthorized access and extract sensitive data without authentication. Zyxel has released security updates to address the flaw. Federal agencies must apply patches immediately to prevent compromise. CISA recommends all organizations—not just federal entities—prioritize patching these devices and review network logs for signs of exploitation. This marks another critical infrastructure threat requiring urgent remediation. Organizations should verify their switch inventory and implement updates without delay.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P292HACKERS CLAIM FBI DATA BREACH AFFECTING ALL EMPLOYEES

Hackers claim to have compromised the Federal Bureau of Investigation and obtained personal data on all FBI employees. The breach's scope and authenticity have not yet been independently verified.

JUST NOW— Security Desk

P292CISCO FINDS AI-GUIDED MALWARE WITH NO HUMAN CONTROL

Researchers at Cisco Talos developed a new framework to detect malware and hacking tools powered by AI chatbots. The discovery revealed an unusual threat: autonomous malware operating without human handlers.

1H AGO— AI Desk

P277WORDPRESS FLAW EXPOSES PATH TRAVERSAL, RCE RISK

WordPress disclosed an unauthenticated path traversal vulnerability that could lead to conditional remote code execution. The issue affects WordPress core and has been documented in an official security advisory.

4H AGO— Industry Desk

P276ROGUE MFA PROVIDERS CAN STEAL PASSWORDS

Security researchers have demonstrated an attack allowing hackers with privileged access to register fake MFA providers and harvest user passwords during login. The vulnerability exploits the authentication process itself.

4H AGO— Industry Desk

◄ BACK TO NEWS

CISA ORDERS FEDS TO PATCH ZYXEL SWITCH FLAW

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF