- What: Zbtlink denies backdoor claims in its routers
- Impact: Users may be concerned about potential security risks
IoT Zbtlink denies backdoor claims amid firmware download pause August 7, 2026 Share By SC Staff Chinese Wi-Fi router vendor Zbtlink has denied allegations of backdoors in its products, but has temporarily paused firmware downloads due to unspecified security vulnerabilities. The accusations of a built-in backdoor, dubbed "ENDLESSDOORS," were made by threat intelligence platform VulnCheck, according to The Register. VulnCheck CTO Jacob Baines claims that Zbtlink routers are intentionally designed to communicate with command and control servers, a feature he calls a "phone-home trojan horse." Baines stated that the rctl (remote control Linux) tool, found on GitHub since 2015, allows for simple command and control communication without robust security measures like handshakes or key exchanges. He further noted that the communication is unencrypted and can be hijacked by anyone along the network path. Zbtlink has responded by stating that the feature is for after-sales maintenance and not included in mass-produced units, though their download page has since acknowledged "firmware security vulnerabilities." The company also highlighted its specialization in OEM/ODM services, where customers often use their own custom software. VulnCheck advises users to replace affected devices or implement strict network controls. Source: The Register SC Staff Related IoT Fuyao operation uses Android TV boxes for ad fraud SC Staff July 31, 2026 Bitsight researchers uncovered the operation by monitoring an expired domain used for factory backdoors and telemetry. OT Security Two-decade-old vulnerability found in Wansview security camera SC Staff July 23, 2026 Cyber Insider disclosed that a popular Wansview indoor security camera model, the WVC Q5, was found to be shipping with a web server vulnerable to a flaw first identified over 20 years ago. IoT LG monitors criticized for silently installing McAfee ads via Windows Update SC Staff July 20, 2026 The LG Monitor App Installer, identified by YouTube channel Gamers Nexus, installs automatically when a compatible LG monitor is connected to a Windows PC. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds