Cybersecurity analysts are highlighting a malware initiative aimed at exploiting security weaknesses in TBK digital video recorders (DVRs) and Four-Faith routers to enlist these devices into an emerging botnet known as RondoDox.
The identified vulnerabilities consist of CVE-2024-3721, a medium-risk command injection flaw impacting TBK DVR-4104 and DVR-4216 models, as well as CVE-2024-12856, an operating…