An alert issued by Fortinet is informing the public that the Gafgyt botnet malware is currently actively being used to exploit a five-year-old vulnerability in the Zyxel P660HN-T1A router, according to BleepingComputer. Zyxel patched the vulnerability, a critical-severity unauthenticated command injection flaw designated CVE-2017-18368 found in the device’s Remote System Log forwarding function, back in 2017.

Source: SC Magazine