ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

A new Linux malware strain, dubbed ‘ClingSTUN,’ is exploiting a growing list of vulnerabilities in IoT devices to establish a persistent foothold on enterprise networks. Researchers have identified at least 24 vulnerabilities affecting devices from manufacturers like D-Link, Realtek, and TP-Link, with the oldest dating back to 2014 and the most recent from earlier this year. Organizations should proactively identify vulnerable devices, promptly apply vendor updates, and implement network segmentation to mitigate the risk of IP blocklisting and operational disruption.