Zyxel's June patch did not stop the switch attacks, because the flaw was a different one
Shownotes
Evening edition, Thursday 5 November 2026
Zyxel has fixed a zero-day in its GS1900 switches that was used against nearly 1,000 devices in attacks first blamed on a bug patched in June. We cover the design lesson, plus the CMA's Microsoft consultation and a Google Cloud outage.
Sources
- Zyxel security advisory: out-of-bounds write in GS1900 series switches (3 November 2026)
- BleepingComputer: Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
- SecurityWeek: Zyxel switch hacks blamed on patched flaw actually exploited a zero-day
- CMA: first steps to ensure choice in business software
- Channel 4 News: Google Cloud outage, has the UK lost its digital sovereignty?
- ITPro: The Google Cloud outage explained