Security Affairs

SEPTEMBER 4, 2019

Experts at SEC Consult discovered several security issues in various Zyxel devices that allow to hack them via unauthenticated DNS requests. The first issue is an information disclosure flaw via unauthenticated external DNS requests that affect Zyxel devices from the USG, UAG, ATP, VPN and NXC series. Pierluigi Paganini.

DNS 77

DNS Hacking Firmware Wireless 77

Malwarebytes

MAY 25, 2022

XorDDoS, a Linux Trojan known for its modularity and stealth, was first discovered in 2014 by the white hat research group, MalwareMustDie (MMD). Microsoft says it’s recorded a massive increase in XorDDoS activity (254 percent) in the last six months. MMD believed the Linux Trojan originated in China.

Malware 133

Malware IoT DDOS DNS 133

Krebs on Security

MARCH 2, 2020

HYAS said it quickly notified the French national computer emergency team and the FBI about its findings, which pointed to a dynamic domain name system (DNS) provider on which the purveyors of this attack campaign relied for their various malware servers. In this two-hour Arabic language YouTube tutorial from 2014 , Fatal.001

DNS 258

DNS Penetration Testing Malware Hacking 258

Security Affairs

MARCH 22, 2020

. “On March 16th I have found an unprotected and thus publicly available Elasticsearch instance which appeared to be managed by a UK-based security company, according to the SSL certificate and reverse DNS records.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Adobe, Last.

Data breaches 99

Data breaches DNS Advertising Engineering 99

Security Affairs

JULY 27, 2020

According to our estimate, CoAP can reach up to 32 times (32x) amplification factor, which is roughly between the amplification power of DNS and SSDP.”. Change the default username and passwords for all network devices, especially IoT devices. Configure network firewalls to block unauthorized IP addresses and disable port forwarding.

DDOS 109

DDOS IoT Internet Internet 109

Security Affairs

MAY 18, 2019

The devices continue to leak the information even when their firewall is turned on. The issue discovered by the expert, in fact, could be used by attackers to discover if the vulnerable routers are still using default administrative passwords. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Wireless 86

Wireless IoT DNS Advertising 86

Security Affairs

MARCH 22, 2020

. “On March 16th I have found an unprotected and thus publicly available Elasticsearch instance which appeared to be managed by a UK-based security company, according to the SSL certificate and reverse DNS records.” ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Adobe, Last.

Data breaches 60

Data breaches DNS Advertising Engineering 60