VPNFilter
Cisco Talos and the FBI disclose a half-million-strong botnet of compromised SOHO routers and NAS devices, with destructive and selective-monitoring capability. Targeting in Ukraine ahead of the Champions League final.
Dyn
Friday's Dyn outage took out a long list of major internet services for several hours. Mirai again. The DNS-as-single-point-of-failure architecture is on display.
Mirai, Krebs, the IoT bill
Brian Krebs's blog took 620 Gbps for several days. The botnet is composed of consumer IoT devices — cameras, DVRs, routers — running default credentials. The bill for fifteen years of IoT security indifference has arrived.