Taiwanese networking equipment company Zyxel is warning customers of an ongoing attack targeting a “small subset” of its security products such as firewall and VPN servers. The firm said the attacks single out appliances that have remote management or SSL VPN enabled. The attacks are targeting devices running on-premise ZLD firmware, implying that the targeted devices are publicly accessible over the internet. The development comes as enterprise VPNs and other network devices have become a top target of attackers in a series of campaigns aimed at finding new avenues into corporate networks.
Source: https://thehackernews.com/2021/06/watch-out-zyxel-firewalls-and-vpns.html