Pen Test

OCTOBER 12, 2023

Criminals may use hijacked drones for illegal surveillance, smuggling, or even as weapons. What are the common firmware and software vulnerabilities in RF devices that can be exploited? Vulnerabilities in RF technology often encompass various weaknesses and security gaps within the firmware and software used in RF devices.

Encryption 52

Encryption Firmware Surveillance Technology 52

Security Affairs

SEPTEMBER 16, 2018

Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal. 20% discount. Kindle Edition. Paper Copy.

Firmware 58

Firmware Advertising Surveillance Data breaches 58

Security Affairs

JULY 20, 2018

Positive Technologies discovered two flaws affecting Dongguan Diqee 360 smart vacuums that can be used to perform video surveillance. The two vulnerabilities have been tracked as CVE-2018-10987 and CVE-2018-10988 , the former could be exploited by a remote attacker meanwhile the latter needs physical access to the device.

Firmware 44

Firmware Surveillance Authentication Technology 44

Security Affairs

AUGUST 30, 2019

A Russian security researcher has found that hardware wiretapping equipment composing Russia’s SORM surveillance system had been leaking user data. SORM is a mass surveillance system that allows the Government of Moscow to track online activities of single individuals thanks to the support of the Russian ISPs. Pierluigi Paganini.

Surveillance 80

Surveillance Firmware Mobile Advertising 80

Security Affairs

JULY 23, 2018

The first vulnerability, tracked as CVE-2018-3937, is a command injection issue that affects the measurementBitrateExec features implemented in the IPELA E Series Network Camera. Both vulnerabilities effects Sony IPELA E series G5 firmware 1.87.00, the tech giant released an update last week to address them.

Advertising 53

Advertising Firmware Hacking Surveillance 53

SecureList

NOVEMBER 26, 2021

At the end of September, at the Kaspersky Security Analyst Summit , our researchers provided an overview of FinSpy , an infamous surveillance toolset that several NGOs have repeatedly reported being used against journalists, political dissidents and human rights activists.

Malware 100

Malware Banking Energy and Utilities Accountability 100

ForAllSecure

APRIL 22, 2021

In 2018, we got some broader exemptions for all data, all devices all types of devices. The Mirai botnet contributed to a massive denial of service attack that brought parts of the Internet to a standstill, what was remarkable was that Mariah was constructed from 1000s of Internet of Things devices, namely surveillance cameras.

IoT 52

IoT Hacking Internet Internet 52

ForAllSecure

APRIL 22, 2021

In 2018, we got some broader exemptions for all data, all devices all types of devices. The Mirai botnet contributed to a massive denial of service attack that brought parts of the Internet to a standstill, what was remarkable was that Mariah was constructed from 1000s of Internet of Things devices, namely surveillance cameras.

IoT 52

IoT Hacking Internet Internet 52

SecureList

NOVEMBER 30, 2021

Based on forensic analysis of numerous mobile devices, Amnesty International’s Security Lab found that the software was repeatedly used in an abusive manner for surveillance. Moreover, the malware mentioned by Google matched ThreatNeedle – malware that we have been tracking since 2018. Firmware vulnerabilities.

Malware 116

Malware Mobile Spyware Surveillance 116

SecureList

APRIL 27, 2022

We had initially analyzed this Delphi malware in April 2018. In December we were made aware of a UEFI firmware-level compromise through logs from our firmware scanning technology. Some capabilities we analyzed are similar to those provided in other notorious post-exploitation toolkits. Other interesting discoveries.

Malware 136

Malware Firmware Government Phishing 136

ForAllSecure

OCTOBER 5, 2021

It was for 1000s of compromised, Internet of Things, enabled devices, such as surveillance cameras, residential gateways, internet connected printers, and even in home baby monitors these devices themselves are often thought of as not having much in the way of resources, and really they don't have many computing resources. Probably not.

IoT 52

IoT DDOS Malware Internet 52

SecureList

OCTOBER 26, 2021

On June 3, Check Point published a report about an ongoing surveillance operation targeting a Southeast Asian government, and attributed the malicious activities to a Chinese-speaking threat actor named SharpPanda. Lyceum is a threat group operating against high-profile targets in the Middle East since at least 2018. Middle East.

Malware 143

Malware Government Surveillance Spyware 143