CISA orders feds to patch Zyxel flaw exploited for data theft

CISA has issued a directive ordering federal agencies to patch a high-severity vulnerability in Zyxel GS1900 series switches. The flaw is being actively exploited by attackers for data theft purposes. The directive comes with a deadline of Thursday, reflecting the urgency of the threat. Zyxel GS1900 series switches are network infrastructure devices commonly used in enterprise environments. The active exploitation of this vulnerability poses significant risk to organizations that have not yet applied available patches. CISA's mandate applies to federal civilian agencies but serves as a strong recommendation for all organizations using affected Zyxel hardware.