Krebs on Security

JUNE 25, 2021

Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affected device.

Internet 303

Internet Internet Backups Small Business 303

Security Affairs

OCTOBER 20, 2018

CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. The company provides a firmware with a web interface that mainly uses PHP as a serverside language.

Firmware 60

Firmware IoT VPN Authentication 60

Malwarebytes

AUGUST 1, 2022

This web server is present in Arris firmware which can be found in several router models. ISP customer premise equipment (CPE) often uses this web server, and ISP subscribers will typically get these routers in loan for telephony and Internet access. last official release 2010) has a path traversal vulnerability.

Firmware 144

Firmware Internet Internet Passwords 144

CyberSecurity Insiders

JUNE 2, 2023

OT systems often come as closed systems with firmware and software installed by a supplier. In practice, however, air-gapping an OT system or firewalling its protected network is only the beginning of hardening its overall security. It also does not require an internet connection, updates to date telemetry, or modern OS versions.

Cyber threats 136

Cyber threats Technology Firewall Ransomware 136

Malwarebytes

AUGUST 1, 2022

This web server is present in Arris firmware which can be found in several router models. ISP customer premise equipment (CPE) often uses this web server, and ISP subscribers will typically get these routers in loan for telephony and Internet access. last official release 2010) has a path traversal vulnerability.

Firmware 55

Firmware Internet Internet Passwords 55

eSecurity Planet

MARCH 4, 2024

All sites incorporated the archaic FCKeditor plug-in, which stopped receiving support in 2010. The fix: To eliminate malware infections, perform a factory reset, upgrade to the latest firmware, change all default usernames and passwords, and adjust firewall rules to block exposure to unwanted remote management services.

IoT 108

IoT Internet Internet Ransomware 108