D-Link Multiple Devices Attack

Multiple D-Link routers and NAS devices—many of which are end-of-life and unpatched—are being actively targeted for several vulnerabilities (notably CVE-2024-3272 and CVE-2024-3273 that enable unauthenticated command execution when combined with hard-coded/default accounts). FortiGuard observed widespread attack attempts (tens of thousands of IPS devices), CISA added several CVEs to its KEV catalog, and vendors recommend retiring affected EOL devices and following mitigation guidance.