Your Water System Exposed 💧 & 100K Routers Backdoored 🔓

Two stories from today's security headlines hit close to home: one puts the machines that run our water supply online for anyone to find, and the other bakes a permanent backdoor into more than 100,000 routers that no software update can fix. Here's what happened and why it matters to you.

The Machines Running Your Water Are Sitting Wide Open 🏭

Security researchers at Forescout found more than 4,400 industrial controllers made by Rockwell — the small computers that physically operate equipment like pumps and valves — exposed directly to the open internet. Alarmingly, 22 of them sit in U.S. cities whose water utilities were recently attacked.

The scary part isn't some genius hacking technique. These devices were reachable through a networking port left open to the world, meaning attackers didn't need to break down the door — it was never locked. For anyone who drinks tap water, that's a reminder that critical infrastructure is often protected by little more than obscurity. The fix is straightforward: utilities should tuck these controllers safely behind a VPN and follow Rockwell's recovery guidance to unlock any systems already hijacked.

Read more

100,000 Routers Have a Backdoor You Can't Patch Away 🔓

Researchers at VulnCheck uncovered an intentional, unpatchable backdoor — nicknamed "EndlessDoors" — hidden inside more than 100,000 active Zbtlink and Wiflyer routers. Instead of waiting for hackers to knock, the router quietly phones home to the attackers on its own, sidestepping the usual protections that keep outsiders off your network.

Because the flaw is built into the hardware itself, there's no software update that makes it go away — the only real fix is to physically replace the device. If your home or business runs one of these routers, it's essentially an unlocked side entrance into your network. Defenders are being urged to watch for suspicious traffic on port 7000 and swap out affected hardware entirely.

Read more

Whether it's the water plant down the road or the router on your desk, today's threats target the everyday systems we take for granted. Stay ahead of threats with GOCO Security at gocosecurity.com.