Krebs on Security
JUNE 25, 2021
Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affected device.
Security Affairs
MAY 16, 2023
China-linked APT group Mustang Panda employed a custom firmware implant targeting TP-Link routers in targeted attacks since January 2023. MustangPanda has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
NOVEMBER 29, 2020
out of 10 in severity by the industry-standard Common Vulnerability Scoring System (CVSS) and impacts all versions of EtherNet/IP Adapter Source Code Stack prior to 2.28, which was released on November 21, 2012. Tracked as CVE-2020-25159 , the flaw is rated 9.8 This would leave many running in the wild still today.”
Malwarebytes
APRIL 28, 2022
In real life this usually means they are used as an external hard-drive that can be accessed over an intranet or the Internet. of Netatalk was released in July 2012. Western Digital removed Netatalk from its firmware, released on January 10, 2022. Version 3.0 with a new feature and several security updates. Not just QNAP.
Security Affairs
MAY 19, 2020
“There is no evidence to support any other firmware versions are vulnerable at this point in time and these findings have been shared with Symantec.” Experts note that the exploit is only effective for authenticated sessions and the affected devices are End of Life (EOL) from 2012. ” concludes Palo Alto Networks.
SecureList
NOVEMBER 14, 2022
In both cases, we described new UEFI firmware bootkits that managed to propagate malicious components from the deepest layers of the machine up to Windows’ user-land. The reason is simple: they represent huge software stacks that must support many protocols and have to be internet-facing to operate properly.
Security Affairs
OCTOBER 20, 2018
CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. The company provides a firmware with a web interface that mainly uses PHP as a serverside language.
Expert insights. Personalized for you.
307 
Let's personalize your content