article thumbnail

79 Netgear router models affected by a dangerous Zero-day

Security Affairs

Security experts Adam Nichols from GRIMM and d4rkn3ss from the Vietnamese internet service provider VNPT have independently reported a severe unpatched security vulnerability that affects 79 Netgear router models. Nichols discovered that the vulnerability affects 758 different firmware versions that run on 79 Netgear routers.

Firmware 134
article thumbnail

News Alert: Flexxon selects a Chief Technology Strategist, signals intent to expand into the US

The Last Watchdog

Nilsen, who holds a doctorate in physics as well as advanced degrees in electrical engineering and mathematics, is a strong advocate for the decentralized Internet and supports the advancement of innovative analog and digital methods to address the growing threat of cyberattacks. About Flexxon. About the X-PHY ®.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Russian Sednit APT used the first UEFI rootkit of ever in attacks in the wild

Security Affairs

” The Sednit APT group has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. This solution comes pre-installed in the firmware of a large number of laptops manufactured by various OEMs, waiting to be activated by their owners.” ” continues the report.

article thumbnail

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

CyberSecurity Insiders

Golang (also known as Go) is an open-source programming language designed by Google and first published in 2007 that makes it easier for developers to build software. Ax with firmware 1.04b12 and earlier. NETGEAR DGN2200 devices with firmware through 10.0.0.50. Affected products include: NAS326 before firmware V5.21(AAZF.7)C0

Malware 85
article thumbnail

IT threat evolution Q3 2021

SecureList

The vulnerability is in MSHTML, the Internet Explorer engine. Apart from Trojanized installers, we also observed infections involving use of a UEFI (Unified Extensible Firmware Interface) and MBR (Master Boot Record) bootkit. It also includes a Bitcoin wallet stealing module. Qakbot banking Trojan. logins, passwords, etc.),

Malware 86
article thumbnail

Too much UPnP-enabled connected devices still vulnerable to cyber attacks

Security Affairs

. “The hackers behind it reportedly took advantage of poorly configured routers that had the Universal Plug and Play (UPnP) service enabled, which caused the routers to forward public ports to the private devices and be open to the public internet,” reads the analysis published by Yang.

article thumbnail

The Hacker Mind Podcast: Hacking Voting Systems

ForAllSecure

Vamosi: Back in 2007 the California Secretary of State, Debra Bowen, did the unthinkable: she decertified all the digital voting systems in the state. held a pilot of a new Internet voting system. More individual states’ voting systems were exposed and also addressable from the internet. Apple Podcasts. Google Podcasts.

Hacking 52