Find the helpers

Cisco Talos publishes a Threat Source newsletter disclosing 44 vulnerabilities (63 CVEs) in the Wavlink AC3000 router that can be exploited over WAN to gain root access via the wcrtrl service and static login credentials; Talos released Snort rules and ClamAV signatures to detect exploitation. The newsletter also summarizes major security headlines (Fortinet exploitation, CISA advisory on CVE-2024-12686, Microsoft’s large January patch), and includes recent malware telemetry with SHA256/MD5 hashes and detection names.