Akamai reports that a Mirai botnet is exploiting a command injection vulnerability (CVE-2025-29635) in discontinued D-Link routers, allowing attackers to launch attacks through crafted POST requests. D-Link has advised users to retire these devices due to the security risks, as they no longer receive updates.
Akamai's report on Mirai botnet's exploitation of a command injection vulnerability in discontinued D-Link routers highlights a critical issue: legacy and unsupported devices can become prime targets for cyberattacks. As a cybersecurity professional, it's crucial to prioritize the decommissioning of such devices in your network to mitigate potential threats and strengthen your organization's security posture.