Security Affairs

MAY 25, 2023

“Please note that this is a device beta software, beta firmware, or hot-fix release which is still undergoing final testing before its official release. The beta software, beta firmware, or hot-fix is provided on an “as is” and “as available” basis and the user assumes all risk and liability for use thereof.

Firmware 93

Firmware Authentication Software Hacking 93

Security Affairs

MAY 16, 2022

Researchers devised an attack technique to tamper the firmware and execute a malware onto a Bluetooth chip when an iPhone is “off.” Unlike NFC and UWB chips, the Bluetooth firmware is neither signed nor encrypted opening the doors to modification. To nominate, please visit:? Pierluigi Paganini.

Malware 96

Malware Wireless Firmware Mobile 96

Security Affairs

DECEMBER 24, 2022

“The firmware is basically a merge of 3 sections, the LZMA section is the kernel, at 0x148CD6 the root-fs and at 0x90BD36 the www content.” Owners of impacted devices have to upgrade them with the latest firmware release as soon as possible. They ask to keep the information confidential until the patch has been released.

Firmware 98

Firmware Passwords Hacking Cybersecurity 98

Security Affairs

OCTOBER 5, 2020

The experts were investigating several suspicious UEFI firmware images when discovered four components, some of which were borrowing the source code a Hacking Team spyware. The firmware malware is based on code associated with HackingTeam’s VectorEDK bootkit, with minor changes. ” concludes the report.

Firmware 127

Firmware Spyware Surveillance Hacking 127

Security Affairs

APRIL 19, 2022

Lenovo warns of vulnerabilities in its Unified Extensible Firmware Interface (UEFI) shipped with at least 100 notebook models. The vulnerabilities affecting the Lenovo UEFI result from the use of two UEFI firmware drivers, named SecureBackDoor and SecureBackDoorPeim respectively. ” reads the advisory published by Lenovo.

Firmware 84

Firmware Manufacturing Hacking Cybersecurity 84

Security Affairs

JUNE 12, 2022

By using the manufacturer’s built-in ports, we were able to manipulate on-board components and interact with the device.Combining both known and novel techniques, we were able to achieve root access to the device’s operating system and pull its firmware for emulation and vulnerability discovery.” Overall 4.8. ” reads the advisory.

Firmware 87

Firmware Penetration Testing Manufacturing Authentication 87

Security Affairs

MAY 11, 2023

“NETGEAR strongly recommends that you download the latest firmware as soon as possible.” ” The vendor addressed the issues in April 2023 with the release of firmware version 1.0.10.94 These vulnerabilities require an attacker to have your WiFi password or an Ethernet connection to your network to be exploited.”

Hacking 95

Hacking Firmware Authentication DNS 95

Security Affairs

MARCH 22, 2022

At the end of January, QNAP forced the firmware update for its Network Attached Storage (NAS) devices to protect its customers against the DeadBolt ransomware. ” After QNAP forced the firmware security update, the number of infections dropped to less than 300 in March. It was looking like this problem was behind us.”

Ransomware 97

Ransomware Firmware Internet Internet 97

Security Affairs

MAY 13, 2022

Below is the list of vulnerable products and related patches: Affected model Affected firmware version Patch availability USG FLEX 100(W), 200, 500, 700 ZLD V5.00 If possible, enable automatic firmware updates. Commands are executed as the nobody user.” ” reads the report published by Rapid7. through ZLD V5.21

Firewall 71

Firewall Firmware VPN Wireless 71

Security Affairs

APRIL 25, 2023

Working exploits for LAN and WAN interface accesses were respectively reported by Team Viettel and Qrious Security. In March, TP-Link released a firmware update to address multiple issues, including this vulnerability. The vulnerability was first reported to ZDI during the Pwn2Own Toronto 2022 event.

DDOS 90

DDOS Engineering Firmware Architecture 90

Security Affairs

DECEMBER 24, 2022

“The firmware is basically a merge of 3 sections, the LZMA section is the kernel, at 0x148CD6 the root-fs and at 0x90BD36 the www content.” Owners of impacted devices have to upgrade them with the latest firmware release as soon as possible. They ask to keep the information confidential until the patch has been released.

Firmware 52

Firmware Passwords Hacking Cybersecurity 52

Security Affairs

JUNE 5, 2022

Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”) To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Spyware 102

Spyware Firmware Ransomware Scams 102

Security Affairs

MAY 1, 2022

Critical Ongoing VS Firmware 2.3 Synology products affected by the flaw are: Product Severity Fixed Release Availability DSM 7.1 Critical Upgrade to 7.1-42661-1 42661-1 or above. Critical Ongoing DSM 6.2 Critical Ongoing SRM 1.2 Critical Ongoing. To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook.

Firmware 84

Firmware Hacking Cybersecurity Internet 84

Kali Linux

FEBRUARY 27, 2024

As it turns out, Kenneth operates a network of mirrors, which was officially announced back in May 2023 on his blog: Building the Micro Mirror Free Software CDN. For anyone interested in Internet infrastructure, we encourage you to read it, that’s a well-written blog post right there, waiting for you. Automate it!

Software 145

Software Firmware VPN Internet 145

Security Affairs

DECEMBER 14, 2022

Most analyzed brands (96.44% of the discovered cameras) force users to set passwords or generate unique default passwords on the newest models and firmware versions. Sometimes, they don’t even mention it in the initial setup process, with the recommendation being on a blog post instead.

Surveillance 128

Surveillance Manufacturing Passwords Internet 128

Security Affairs

MAY 17, 2022

Below is the list of vulnerable products and related patches: AFFECTED MODEL AFFECTED FIRMWARE VERSION PATCH AVAILABILITY USG FLEX 100(W), 200, 500, 700 ZLD V5.00 If possible, enable automatic firmware updates. “The affected models are vulnerable to unauthenticated and remote command injection via the administrative HTTP interface.

Firewall 73

Firewall VPN Firmware Internet 73

Security Affairs

SEPTEMBER 15, 2020

Below the list of patches that could be installed to prevent Chinese hackers and other threat actors from exploiting them: Vulnerability Patch Information CVE-2020-5902 F5 Security Advisory: K52145254: TMUI RCE vulnerability CVE-2020-5902 CVE-2019-19781 Citrix blog post: firmware updates for Citrix ADC and Citrix Gateway versions 11.1

Government 72

Government VPN Firmware Energy and Utilities 72

Security Affairs

APRIL 24, 2022

Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice.

Cyber Insurance 75

Cyber Insurance Spyware Firmware Insurance 75

Security Affairs

MARCH 24, 2022

The expert found the default credentials (default credentials are admin:secret ) in manuals firmware and software for its building controller models. The expert published a blog post that describes a step by step procedure to achieve remote code execution with root privileges. ” wrote the expert.

Hacking 96

Hacking Firmware Internet Internet 96

Security Affairs

APRIL 19, 2023

The agencies recommend updating to the latest firmware and switching from SNMP to NETCONF or RESTCONF for network management. It includes discovery of other devices on the network by querying the Address Resolution Protocol (ARP) table to obtain MAC addresses. ” continues the report.

Malware 84

Malware Firmware Government Education 84

Security Affairs

MAY 20, 2022

At the end of January, QNAP forced the firmware update for its Network Attached Storage (NAS) devices to protect its customers against the DeadBolt ransomware. Ransomware operators are also offering for sale the QNAP the master decryption key for 50 BTC which could allow all the victims of this ransomware family to decrypt their files.

Ransomware 97

Ransomware Internet Internet Firmware 97

Security Affairs

MAY 28, 2021

The flaw impacts SIMATIC S7-1200 and S7-1500 CPUs, the vendor has already released firmware updates for the impacted systems. Claroty’s blog post describes the PLC sandbox and the role CVE-2020-15782 could play in an attack. Siemens also provided workarounds for those products for which the vendor has yet to address the flaw.

Hacking 137

Hacking Firmware Cybersecurity Engineering 137

Security Affairs

APRIL 12, 2022

The malware leverages the firmware update process to achieve persistence. Cyclops Blink is sophisticated malware with a modular structure. It supports functionality to add new modules at run-time allowing Sandworm operators to implement additional capability as required. To nominate, please visit:? Pierluigi Paganini.

Firmware 83

Firmware Malware Cybersecurity Hacking 83

Security Affairs

APRIL 25, 2022

Implement a recovery plan to maintain and retain multiple copies of sensitive or proprietary data and servers in a physically separate, segmented, secure location (e.g., Install updates/patch operating systems, software, and firmware as soon as updates/patches are released. hard drive, storage device, the cloud). Pierluigi Paganini.

Ransomware 105

Ransomware Antivirus Passwords Malware 105

Security Affairs

MAY 16, 2023

China-linked APT group Mustang Panda employed a custom firmware implant targeting TP-Link routers in targeted attacks since January 2023. In most recent attacks observed by Check Point, the threat actors employed custom firmware implant designed explicitly for TP-Link routers. ” reads the report published by Check point.

Firmware 97

Firmware Encryption Government Malware 97

Security Affairs

MAY 8, 2023

The authenticity of the leaked private key was confirmed by Alex Matrosov, founder of firmware security firm Binarly. Now the ransomware gang has leaked the company’s private code signing keys on their darkweb leaksite. Confirmed, Intel OEM private key leaked, causing an impact on the entire ecosystem.

Data breaches 79

Data breaches Ransomware Firmware Manufacturing 79

Security Affairs

APRIL 13, 2022

Cynerio ethically disclosed the issues to Aethon and the vendor addressed it with the release of firmware updates.

Mobile 129

Mobile Hacking Firmware Surveillance 129

Security Affairs

MAY 21, 2023

Please vote for Security Affairs ( [link] ) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections where is reported Securityaffairs or my name Pierluigi Paganini Please nominate Security Affairs as your favorite blog.

Data breaches 87

Data breaches Cybercrime Ransomware Passwords 87

Security Affairs

MAY 18, 2023

Please vote for Security Affairs ( [link] ) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections where is reported Securityaffairs or my name Pierluigi Paganini Please nominate Security Affairs as your favorite blog.

Small Business 86

Small Business Firmware Hacking Cybersecurity 86

Security Affairs

FEBRUARY 28, 2024

Per a Microsoft blog post[3] published in March 2023, CVE-2023-23397 is a critical elevation of privilege vulnerability in Microsoft Outlook on Windows wherein Net-NTLMv2 hashes are leaked to actor-controlled infrastructure [T1119, T1020].” Upgrade to the latest firmware version. ” continues the report.

Energy and Utilities 97

Energy and Utilities Government Firewall Malware 97

Security Affairs

APRIL 2, 2021

Security researchers at SAM Seamless Network discovered a couple of critical unpatched flawsin QNAP small office/home office (SOHO) network-attached storage (NAS) devices that could allow remote attackers to execute arbitrary code on vulnerable devices. March 31, 2021 – Initial blog post published. Pierluigi Paganini.

Firmware 73

Firmware Internet Internet Authentication 73

Notice Bored

OCTOBER 22, 2021

Most if not all developments involve information (requirements/objectives, specifications, plans, status/progress reports etc.) and potentially substantial information risks. so the policy could cover those aspects, ballooning in scope from what was presumably intended when the standard was drafted. The end is nigh!

Risk 80

Risk Firmware Software Information Security 80

Security Affairs

APRIL 6, 2022

The malware leverages the firmware update process to achieve persistence. Cyclops Blink is sophisticated malware with a modular structure. It supports functionality to add new modules at run-time allowing Sandworm operators to implement additional capability as required. ” reads the DoJ. To nominate, please visit:? Pierluigi Paganini.

Malware 79

Malware Government Firmware Firewall 79

Kali Linux

DECEMBER 4, 2023

Much more could be written on the topic, and we plan a longer blog post dedicated to it. If you want our blog posts, and only that, in your inbox, sign up! This is where anyone can ask questions to us about Kali or the information security industry as a whole. We have a RSS feeds and newsletter of our blog to help you.

Architecture 145

Architecture Passwords Firmware Software 145

Security Affairs

APRIL 14, 2022

Maintain known-good offline backups for faster recovery upon a disruptive attack, and conduct hashing and integrity checks on firmware and controller configuration files to ensure validity of those backups. Limit ICS/SCADA systems’ network connections to only specifically allowed management and engineering workstations. Pierluigi Paganini.

Passwords 115

Passwords Architecture Backups Cyber Attacks 115

Security Affairs

MARCH 29, 2023

This was recently highlighted by blog posts from Project Zero and Github Security Lab.” At the time of delivery, the latest Samsung firmware had not included a fix for this vulnerability. CVE-2022-3038 , a sandbox escape in Chrome fixed in August 2022, in version 105 and found by Sergei Glazunov in June 2022.

Spyware 85

Spyware Surveillance Firmware Internet 85

Security Affairs

MAY 14, 2023

Please vote for Security Affairs ( [link] ) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections where is reported Securityaffairs or my name Pierluigi Paganini Please nominate Security Affairs as your favorite blog.

Data breaches 88

Data breaches DDOS Artificial Intelligence Ransomware 88