Ubiquiti produces network equipment and software whose vulnerabilities, exposed management interfaces, and insecure configurations can affect organizations.
Search across headline titles and summaries.
Background for this topic.
Ubiquiti is a networking-equipment brand whose ecosystem includes wireless access points, switches, routers and gateways, cameras, and centralized management software such as UniFi. These devices often sit directly on an organization’s network, while management may be performed through a local controller or a vendor-linked cloud account, making their security relevant beyond the individual appliance.
Security reporting commonly concerns firmware vulnerabilities, exposed administrative interfaces, insecure configuration, and compromise of controller or cloud credentials. A flaw in a gateway or controller could allow unauthorized configuration changes, network access, or visibility into connected devices; exposure depends on the product, version, and deployment. Practitioners should inventory models and firmware, restrict management planes from the public internet, enforce strong unique administrator authentication and multi-factor authentication where supported, review remote-management settings and logs, and apply vendor updates through a documented lifecycle. During an incident, preserve controller and gateway logs and check for altered accounts, firewall rules, DNS settings, or newly adopted devices.
GRU Hackers Commandeered 'Moobot' for CyberespionageThe U.S. federal government says it disrupted a criminal botnet that Russian military intelligence had converted into a platform for global cyberespionage. The malware targets Linux-based IoT devices - in this case, routers made by New York manufacturer Ubiquiti.
The FBI took down a botnet of small office/home office (SOHO) routers used by Russia's Main Intelligence Directorate of the General Staff (GRU) to proxy malicious traffic and to target the United States and its allies in spearphishing and credential theft attacks. [...]