Threat Intelligence Center

Security researchers have identified multiple critical vulnerabilities in the YoSmart YoLink Smart Hub, a widely deployed IoT device in communications environments. These flaws, tracked as CVE-2025-59449, CVE-2025-59451, CVE-2025-59452, and CVE-2025-59448, present significant risks to organizations relying on this platform for network connectivity and device management.

Security researchers have identified two malicious Chrome extensions operating a large-scale credential theft campaign targeting users across 170+ websites. These extensions were designed to intercept and exfiltrate login credentials without user knowledge.

Cisco has addressed a critical vulnerability in AsyncOS (CVE-2025-20393) that has been actively exploited in zero-day attacks. Threat actors are leveraging sophisticated tools including AquaShell, AquaPurge, AquaTunnel, and Chisel to compromise affected systems. Organizations running vulnerable AsyncOS instances face immediate risk and should prioritize patching.

The YoSmart YoLink Smart Hub functions as a central hub for managing multiple IoT devices within your smart home ecosystem. This guide examines the hub's security architecture, authentication mechanisms, and configuration options that help protect your connected devices from unauthorized access.

Security researchers have identified a sophisticated threat targeting Zoom users through malicious browser extensions designed to harvest corporate meeting intelligence. These extensions intercept meeting URLs, participant information, and sensitive discussion details before transmitting them to threat actors.

Security researchers have uncovered a browser extension that harvested AI chatbot data from approximately 8 million users. This incident highlights critical vulnerabilities in browser extension ecosystems and the risks users face when third-party tools gain access to sensitive conversations.