[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLe32A71Y4Q4ydi40Abj6SXaC_t8rzvGVgk0BDVyrn8s":3},{"article":4,"iocs":51,"watch_terms":56,"solutions":57,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"413aff7f-2b5f-4757-b7ec-649386b7f499","D-Link warns of multiple zero-days in DGS-3130 Series switches","d-link-warns-of-multiple-zero-days-in-dgs-3130-series-switches-25cfeb","D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. [...]","D-Link has alerted users to multiple unpatched zero-day vulnerabilities affecting its DGS-3130 series managed Gigabit stackable switches. These flaws, discovered by Giresh Kumar Enugu, reside in the D-Link Discovery Protocol (DDP) and could allow attackers to steal sensitive data, alter configurations, or disrupt services. D-Link has provided mitigation steps, including disabling DDP and restricting access, while working on a firmware update.","D-Link warns of multiple unpatched zero-day flaws in DGS-3130 Series switches.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fd-link-warns-of-multiple-zero-days-in-dgs-3130-series-switches\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F11\u002F06\u002FD-Link-logo.jpg","2026-11-06T12:37:22+00:00","2026-11-06T13:00:26.331667+00:00",8,[17,20,23,26],{"name":18,"type":19},"DGS-3130 Series","product",{"name":21,"type":22},"D-Link","vendor",{"name":24,"type":25},"D-Link Discovery Protocol (DDP)","technology",{"name":27,"type":19},"DIR-822A","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,39,41,46],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":40},{"id":28,"icon":30,"name":31,"slug":32},{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[52],{"type":53,"value":54,"context":55},"cve","CVE-2026-86296","Maximum-severity zero-day affecting legacy DIR-822A routers",[21,18,27],{"controls":58,"vendors":145},[59,88,116],{"slug":60,"name":61,"problem":62,"products":63},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":89,"name":90,"problem":91,"products":92},"patch-management","Automated patch management","Known holes get closed in days, not months.",[93,101,108],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":89,"product_name":105,"url":106,"description":107},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":117,"name":118,"problem":119,"products":120},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",[],{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":158},"d-link-zero-days-in-managed-switches-expose-networks-to-data-theft-and-disruption","D-Link Zero-Days in Managed Switches Expose Networks to Data Theft and Disruption","Multiple unpatched zero-day vulnerabilities in D-Link DGS-3130 series switches, residing in the D-Link Discovery Protocol (DDP), highlight the ongoing risk of insecure default protocols enabled on network infrastructure devices. Because no firmware patch exists yet, organizations running these switches are exposed to potential data theft, unauthorized configuration changes, and service disruption with no immediate vendor fix available. This incident underscores that network appliances are frequently overlooked in vulnerability management programs despite sitting at the core of enterprise infrastructure. The fact that DDP could be disabled as a mitigation demonstrates that unnecessary protocols should never be left enabled by default on managed devices.",[151,152,153,154,155,156,157],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIS2 Article 21(2)(b)","OWASP A06:2021 Vulnerable and Outdated Components",{"NIS2 Article 21(2)(b)":159,"NIST SP 800-53 SI-2: Flaw Remediation":160,"CIS Control 12: Network Infrastructure Management":161,"OWASP A06:2021 Vulnerable and Outdated Components":162,"CIS Control 7: Continuous Vulnerability Management":163,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":164,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":165},"NIS2 requires entities to implement vulnerability handling and disclosure policies; operators of critical network infrastructure affected by these D-Link zero-days must have processes to respond to vendor advisories and apply mitigations without delay.","SI-2 mandates that organizations identify, report, and remediate flaws in information systems; applying D-Link's recommended mitigations and tracking the pending firmware update are direct obligations under this control.","The vulnerable switches are core network infrastructure; this control requires hardening and secure configuration of network devices, which would have led to DDP being disabled by default before any vulnerability was discovered.","The DGS-3130 switches running firmware with unpatched DDP flaws are a textbook example of vulnerable components in the network stack, and this OWASP category stresses maintaining inventories and monitoring for newly disclosed vulnerabilities in all used components.","No patch yet exists for these zero-days, making proactive vulnerability tracking and interim mitigation (such as disabling DDP) the only defense; a continuous vulnerability management process ensures organizations act on disclosures immediately rather than waiting passively.","This control requires timely identification and remediation of technical vulnerabilities in assets; the zero-day disclosure demands an immediate response to assess exposure and apply available mitigations across all affected switches.","Restricting access to the switch management interfaces and disabling unauthenticated discovery protocols like DDP aligns with this function's requirement to limit access to assets to authorized users and processes only."]