Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover

In the interconnected world of the Internet of Things (IoT), a single vulnerability can serve as a master key for attackers seeking to infiltrate networks. The recent discovery of an unpatched firmware vulnerability (CVE-2025-65606) in the TOTOLINK EX200 wireless range extender serves as a stark case study. This critical flaw demonstrates how an error in a device’s fundamental code can be weaponized to achieve complete remote device takeover, turning a benign network helper into a potent attack vector.

Kimwolf Android Botnet Infects Over 2 Million Devices via Exposed ADB and Proxy Networks

In early 2026, the cybersecurity community was alerted to one of the most pervasive mobile threats in recent memory: the Kimwolf Android botnet. This sophisticated malware has infected over two million Android devices, transforming them into weapons for Distributed Denial-of-Service (DDoS) attacks, credential stuffing, and a lucrative residential proxy service. Unlike typical malware that relies on user interaction, Kimwolf exploits a technical misconfiguration, the exposed Android Debug Bridge (ADB) interface, often found on non-standard Android devices like smart TVs and set-top boxes.