On Nov 6, D-Link published an interim security advisory for multiple unpatched flaws in its DGS-3130-30TS managed switch, found in the D-Link Discovery Protocol (DDP) and parts of the firmware, per BleepingComputer and D-Link's SAP10523. The company has not released fixed firmware yet, and CVE identifiers are not public. Other DGS-3130 models and other D-Link switch lines are still under investigation.

What the flaws can do. An attacker who can reach the switch on the network may be able to read device and network settings, change admin credentials, expose SNMP community strings, reset the switch, or disrupt service. Separate findings cover SSH configuration, how the device protects operating-system credentials, and firmware encryption. Disabling DDP cuts the main known DDP attack path, but D-Link says it does not fix those other firmware issues.

Why small businesses should care. The DGS-3130 is aimed at small and mid-size offices and metro Ethernet setups. Like the Zyxel GS1900 story earlier this week, a managed switch that sits forgotten in a closet is still in the middle of every office conversation. There is no patch to install today, so the interim steps matter.

Action item: Mitigate until firmware ships.
1. Check the label. Look for "DGS-3130," especially a DGS-3130-30TS. Note the hardware revision and firmware version before you change anything.
2. Disable DDP. On the switch CLI, use no ddp in global and interface configuration, confirm with show ddp, then save so the setting survives a reboot. D-Link says this is the primary interim step for the DDP findings.
3. Remove default SNMP communities. Delete public and private (and any other unused communities). If you still need SNMP, prefer SNMPv3 with authentication, limited to known admin hosts.
4. Keep management off the internet. Restrict SSH, the web UI and SNMP to a small management network or named admin machines. Save an offline config backup, and watch logs for unexpected reboots, config changes or factory resets.
5. Watch for the real fix. Follow D-Link's SAP10523 advisory. When firmware ships, match model and hardware revision before you install it.

Not sure what's in your network closet? Call us at +1 (689) 225-0286, or start with the free security checklist.

Second item: DigiCert customers, expect fake "re-upload your ID" emails. DigiCert says an archive system that held business customer records was left reachable from the internet after a network move, and an attacker used a self-registration feature (no MFA) to create a read-only account, per SecurityWeek. That account could read names, emails, phones and business addresses between June 27 and July 2. For some customers, driver's licenses, passports or utility bills used in validation were also exposed. DigiCert says certificate systems were not affected and certificates still work.

• Open CertCentral by typing the address, not from a scary message asking you to re-upload an ID or "fix validation."
• Treat unexpected DigiCert mail as phishing until you check it inside the real portal.