According to iThome, on September 18, networking equipment manufacturer D-Link (2332) issued a material announcement on the Market Observation Post System (MOPS), stating that its website monitoring mechanisms detected abnormal login records, and further investigation confirmed that external attackers used existing login mechanisms to perform high-volume credential validation attempts against the website [1]. Upon discovering the anomaly, D-Link immediately activated its emergency response mechanism, simultaneously auditing system login logs, blocking suspicious connections, and conducting a site-wide source code security review; no further abnormal login activity using the same method has been detected, and website services continue to operate normally [1]. Based on a preliminary assessment, the incident has no material impact on the company's operations [1].
D-Link detected mass username-and-password login attempts against its website; service kept running
1 min read
- Disclosed
- Sep 22, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 10, 2026
- CVSS basis
- Our assessment
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Cross-industry
What to do nowOur advice
Based on a preliminary assessment, the incident has no material impact on the company's operations [1]
Timeline
- Media reports on this cybersecurity incident[1]
Technical details
Source-Supported Details
Source excerpt: "On September 18, networking equipment manufacturer D-Link (2332) issued a material announcement on the Market Observation Post System (MOPS), stating that its website monitoring mechanisms detected abnormal login records, and further investigation confirmed that external attackers used existing login mechanisms to perform high-volume credential validation attempts against the website." [1].
References
Media1
- [1]
“網通設備公司友訊（2332）於9月18日， 在股市公開資訊觀測站發布重大訊息 ，公司網站監控機制偵測到異常登入記錄，該公司進一步調查後確認，外部攻擊者利用既有登入機制，以大量帳號密碼進行網站登入驗證。”
Expert help
Still not sure whether this affects you?
Tell us about your environment. We'll check it against this advisory, assess the risk, and give you concrete patch and monitoring steps.
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.