CISA mandates patch for Zyxel GS1900 flaw exploited in data-theft attacks

CISA added a high-severity Zyxel GS1900 switch vulnerability to its Known Exploited Vulnerabilities catalog, ordering federal agencies to patch. Active exploitation for data theft is confirmed, though scope and attribution remain unclear. This elevates a network-device flaw to a federal compliance deadline, signaling broader risk to enterprise and critical infrastructure networks using the same gear.