Threat actors are exploiting a medium-severity command injection vulnerability (CVE-2024-3721) in TBK DVR devices and outdated TP-Link Wi-Fi routers to deploy variants of the Mirai botnet, as reported by Fortinet FortiGuard Labs and Palo Alto Networks Unit 42.
For a professional in cybersecurity, the actionable takeaway is to prioritize patching or replacing TBK DVR devices and EoL TP-Link Wi-Fi routers, as they are actively being exploited to deploy Mirai-botnet variants. Ensure that security teams are aware of CVE-2024-3721 and assess their network for vulnerable devices to mitigate potential botnet threats.