2020, Firmware and IoT - Cyber Security Informer

IoT Unravelled Part 3: Security

Troy Hunt

NOVEMBER 25, 2020

In part 1 of this series, I posited that the IoT landscape is an absolute mess but Home Assistant (HA) does an admirable job of tying it all together. I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Now for the big challenge - security. Let's dive into it.

IoT

IoT Firmware Risk Manufacturing

Japanese Government Will Hack Citizens' IoT Devices

Schneier on Security

JANUARY 28, 2019

The Japanese government's decision to log into users' IoT devices has sparked outrage in Japan. Many of today's IoT and router botnets are being built by hackers who take over devices with default or easy-to-guess passwords. Devices in people's homes and on enterprise networks will be tested alike. [.].

IoT

IoT Government Firmware Hacking

BotenaGo botnet targets millions of IoT devices using 33 exploits

Security Affairs

NOVEMBER 11, 2021

Researchers at AT&T discovered a new BotenaGo botnet that is using thirty three exploits to target millions of routers and IoT devices. BotenaGo is a new botnet discovered by researchers at AT&T that leverages thirty three exploits to target millions of routers and IoT devices. 7)C0 NAS520 before firmware V5.21(AASZ.3)C0

IoT

IoT Firmware Malware Wireless

Webinars

Human-Centered Cyber Security Training: Driving Real Impact on Security Culture

MORE WEBINARS

IoT Unravelled Part 4: Making it All Work for Humans

Troy Hunt

NOVEMBER 25, 2020

The first few parts of this series have all been somewhat technical in nature; part 1 was how much of a mess the IoT ecosystem is and how Home Assistant aims to unify it all, part 2 got into the networking layer with both Wi-Fi and Zigbee and in part 3 , I delved into security. Now let's tackle something really tricky - humans.

IoT

IoT Firmware Media Marketing

Microsoft Finds New NETGEAR Firmware Vulnerabilities

Heimadal Security

JULY 2, 2021

Tracked as PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365, they range in CVSS rating from high (7.4) The post Microsoft Finds New NETGEAR Firmware Vulnerabilities appeared first on Heimdal Security Blog. to critical (9.4). Microsoft reported […].

Firmware

Firmware Identity Theft IoT Cybersecurity

New Ttint IoT botnet exploits two zero-days in Tenda routers

Security Affairs

OCTOBER 5, 2020

Security researchers provided technical details about an IoT botnet dubbed Ttint that has been exploiting two zero-days in Tenda routers. Security researchers at Netlab, the network security division Qihoo 360, have published a report that details an IoT botnet dubbed Ttint. ” concludes the report. Pierluigi Paganini.

IoT

IoT Firmware DNS Advertising

CVE-2021-20090 actively exploited to target millions of IoT devices worldwide

Security Affairs

AUGUST 7, 2021

Threat actors are actively exploiting a critical authentication bypass issue (CVE-2021-20090 ) affecting home routers with Arcadyan firmware. Threat actors actively exploit a critical authentication bypass vulnerability, tracked as CVE-2021-20090 , impacting home routers with Arcadyan firmware to deploy a Mirai bot.

IoT

IoT Firmware Authentication Wireless

Overview of IoT threats in 2023

SecureList

SEPTEMBER 21, 2023

IoT devices (routers, cameras, NAS boxes, and smart home components) multiply every year. The first-ever large-scale malware attacks on IoT devices were recorded back in 2008, and their number has only been growing ever since. Telnet, the overwhelmingly popular unencrypted IoT text protocol, is the main target of brute-forcing.

IoT

IoT DDOS Passwords Malware

Mozi Botnet is responsible for most of the IoT Traffic

Security Affairs

SEPTEMBER 20, 2020

The Mozi botnet accounted for 90% of the IoT network traffic observed between October 2019 and June 2020, IBM reported. Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. ” reads the report published by IBM. Pierluigi Paganini.

IoT

IoT DDOS Architecture Passwords

EU to Force IoT, Wireless Device Makers to Improve Security

eSecurity Planet

NOVEMBER 1, 2021

The European Union is poised to place more demands on manufacturers to design greater security into their wireless and Internet of Things (IoT) devices. has made some strides on IoT security at the federal level; it remains to be seen if the EU initiative will spur the U.S. IoT market growth. IoT Security Neglected.

Wireless

Wireless IoT Manufacturing Mobile

March to 5G could pile on heavier security burden for IoT device manufacturers

SC Magazine

APRIL 9, 2021

As the Department of Defense works on standards to dictate 5G rollout, security requirements may be too much for IoT manufacturers. Of course, many security hurdles for IoT device manufacturers are not specific to 5G. The Internet of Things Cybersecurity Improvement Act of 2020 , which was enacted Dec.

Manufacturing

Manufacturing IoT Firmware Architecture

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Security Affairs

OCTOBER 13, 2020

The number of sensors and smart devices connected to the internet is exponentially rising, which are the 5 Major Vulnerabilities for IoT devices. If you take a look at the global market for IoT, you can easily spot the trend. IoT devices are exposed to cybersecurity vulnerabilities. IoT is a complicated concept.

IoT

IoT Cybersecurity Manufacturing Internet

Critical Success Factors to Widespread Deployment of IoT

Thales Cloud Protection & Licensing

FEBRUARY 16, 2021

Critical Success Factors to Widespread Deployment of IoT. Digital technology and connected IoT devices have proliferated across industries and into our daily lives. Finally, IoT devices are being used extensively in smart vehicles and home appliances to provide enhanced user experiences. Threat vectors on IoT.

IoT

IoT Manufacturing Energy and Utilities Data collection

Why Healthcare IoT Requires Strong Machine Identity Management

Security Boulevard

MAY 30, 2022

Why Healthcare IoT Requires Strong Machine Identity Management. The healthcare industry has been leveraging IoT devices for years, steadily increasing its use in facilities and patient care. By 2027, the IoT in Healthcare market is expected to reach $290 billion , up from just $60 billion in 2019. brooke.crothers.

Healthcare

Healthcare IoT Manufacturing Risk

SiteLock’s Top Five Cybersecurity Predictions For 2020

SiteLock

AUGUST 27, 2021

According to SiteLock researchers and cybersecurity experts, the threat landscape will only continue to grow in 2020 and will likely bring even more new challenges with it. We’ve analyzed the current state of the industry and packaged up our top five cybersecurity predictions for 2020.

Cybersecurity

Cybersecurity Phishing Data breaches IoT

IoT Devices and HIPAA Compliance: 6 Things Healthcare Orgs Must Know

SecureWorld News

JUNE 14, 2022

I love the possibilities that Internet of Things (IoT) products bring to our lives. But I'm also very concerned about the associated security and privacy risks that IoT products inherently bring to those using them when controls do not exist or are not used to mitigate the risks. in 2020 to $188.2B

IoT

IoT Healthcare Risk Firmware

IoT and Machine Identity Management in Financial Services

Security Boulevard

JUNE 28, 2022

IoT and Machine Identity Management in Financial Services. How is IoT changing the financial sector? IoT has already positively impacted the financial sector and will only continue to in the future. The most notable and well-documented example of investment in the IoT infrastructure has been by retail banks.

Financial Services

Financial Services IoT Banking Retail

Spyware in the IoT – the Biggest Privacy Threat This Year

SiteLock

AUGUST 27, 2021

Simply defined, the internet of things (IoT) is a network of Internet-connected objects able to collect and exchange data. In today’s digital-driven world, IoT connects almost everything including homes, offices, and vehicles, allowing users the convenience of activating and operating nearly any device remotely. Think again.

IoT

IoT Spyware VPN Passwords

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

CyberSecurity Insiders

NOVEMBER 11, 2021

Deployed with more than 30 exploits, it has the potential of targeting millions of routers and IoT devices. Example 1: main_infectFunctionGponFiber function, exploits CVE-2020-8958. The function exploiting the vulnerability CVE-2020-10173 is shown in figure 9. Example 2: Function exploiting vulnerability CVE-2020-10173.

Malware

Malware IoT Firmware Authentication

News Alert: Swissbit introduces small-capacity memory for IIoT, smart city applications

The Last Watchdog

JUNE 27, 2023

For the most efficient operation of these green IoT applications, Swissbit now offers targeted small-capacity storage media. About Swissbit AG: Swissbit AG is the only independent European manufacturer of storage and embedded IoT solutions for demanding applications. They also guarantee 100% data security. 2 and 2.5”

IoT

IoT Manufacturing Media Technology

Experts found 15 flaws in Netgear JGS516PE switch, including a critical RCE

Security Affairs

MARCH 14, 2021

Netgear has released security and firmware updates for its JGS516PE Ethernet switch to address 15 vulnerabilities, including a critica remote code execution issue. The most severe flaw is a critical RCE tracked as CVE-2020-26919 and rated with a CVSS v3 score of 9.8, ” reads the advisory published by NCC Group.”

Firmware

Firmware Authentication Hacking Software

Both Mirai and Hoaxcalls IoT botnets target Symantec Web Gateways

Security Affairs

MAY 19, 2020

“There is no evidence to support any other firmware versions are vulnerable at this point in time and these findings have been shared with Symantec.” Experts first observed the exploitation of the flaw in the wild on April 24, 2020, as part of an evolution of the Hoaxcalls botnet that was first discovered early of April.

IoT

IoT DDOS Authentication Advertising

A new Zerobot variant spreads by exploiting Apache flaws

Security Affairs

DECEMBER 22, 2022

Microsoft Threat Intelligence Center (MSTIC) researchers discovered a new variant of the Zerobot botnet (aka ZeroStresser) that was improved with the capabilities to target more Internet of Things (IoT) devices. Adopt a comprehensive IoT security solution. The IT giant is tracking this cluster of threat activity as DEV-1061.

IoT

IoT DDOS Malware Firmware

Flaws in Medtronic MyCareLink can allow attackers to take over implanted cardiac devices

Security Affairs

DECEMBER 15, 2020

Experts from IoT security firm Sternum discovered vulnerabilities discovered in Medtronic’s MyCareLink Smart 25000 Patient Reader product that could be exploited to take control of a paired cardiac device. The experts found three flaws that could be exploited to modify or forge data that is received from the implanted cardiac devices.

Firmware

Firmware Authentication Mobile IoT

IoT Unravelled Part 2: IP Addresses, Network, Zigbee, Custom Firmware and Soldering

Troy Hunt

NOVEMBER 23, 2020

So, peeling back that next layer, the whole IoT space isn't just about devices that get their own IP address on your network and talk over TCP (or UDP). Let's drill into all that and then go deeper into custom firmware and soldering too. IoT and IP Addresses So, what happens when you start filling your home with IoT things?

Firmware

Firmware IoT Wireless Manufacturing

The Internet of Things Is Everywhere. Are You Secure?

Security Boulevard

MARCH 18, 2021

The internet of things (IoT) describes the network of interconnected devices embedded with sensors, software, or other technology that exchange data with other devices and systems over the Internet. . This means that currently there are three IoT devices for every one human on the planet. The Technical Challenge of IoT Security.

Internet

Internet Internet IoT Software

Hacking Wi-Fi networks by exploiting a flaw in Philips Smart Light Bulbs

Security Affairs

FEBRUARY 6, 2020

Security experts from Check Point discovered a high-severity flaw ( CVE-2020-6007 ) in Philips Hue Smart Light Bulbs that can be exploited by hackers to gain entry into a targeted WiFi network. The bridge discovers the hacker-controlled bulb with updated firmware, and the user adds it back onto their network.

Hacking

Hacking IoT Wireless Firmware

Flaws in Wyze cam devices allow their complete takeover

Security Affairs

MARCH 31, 2022

The flaws were reported to Wyze in May 2019, the company addressed the CVE-2019-9564 and CVE-2019-12266 flaws in September 2019 and November 2020, respectively. The vendor addressed the unauthenticated access to the content of the SD card with the release of firmware updates on January 29, 2022.

IoT

IoT Firmware Marketing Authentication

Threat actors exploit discontinues Boa web servers to target critical infrastructure

Security Affairs

NOVEMBER 24, 2022

The Boa web server is widely used across a variety of devices, including IoT devices, and is often used to access settings and management consoles as well as sign-in screens. Researchers at Recorded Future observed several intrusion attempts on Indian critical infrastructure since 2020 and shared IOCs related to this campaign.

IoT

IoT Firmware Software Risk

Home Router Analysis: 'No Router is Without Flaws'

SecureWorld News

JULY 9, 2020

Home routers are one of the many poster children for 2020. In its study, "Home Router Security Report 2020," EU cybersecurity firm Fraunhofer sought to answer five questions about some of the most popular home routers: Days Since Last Firmware Update Release: when were the devices updated last time? But that's not all.

Firmware

Firmware IoT Education Cybersecurity

Router security in 2021

SecureList

JUNE 8, 2022

During 2020 and 2021, more than 500 router vulnerabilities were found. The nvd.nist.gov website presents different figures, but they too show a significant increase in the number of router vulnerabilities found in 2020 and 2021. Attacks by this malware as a percentage of all attacks on Kaspersky IoT honeypots in 2021.

DDOS

DDOS Passwords IoT Firmware

Flaws in Realtek RTL8170C Wi-Fi module allow hijacking wireless communications

Security Affairs

JUNE 3, 2021

Researchers from Israeli IoT security firm Vdoo found multiple vulnerabilities in the Realtek RTL8170C Wi-Fi module that could allow to elevate privileges and hijack wireless communications. Researchers found multiple flaws in the Realtek RTL8170C Wi-Fi module that could be exploited to elevate privileges and hijack wireless communications.

Wireless

Wireless IoT Encryption Firmware

BotenaGo strikes again – malware source code uploaded to GitHub

CyberSecurity Insiders

JANUARY 26, 2022

Alien Labs expects to see new campaigns based on BotenaGo variants targeting routers and IoT devices globally. The Mirai botnet targets mostly routers and IoT devices, and it supports different architectures including Linux x64, different ARM versions, MIPS, PowerPC, and more. Figure 4 shows the implementation of CVE-2020-10987.

Malware

Malware IoT Authentication Antivirus

Interview With a Crypto Scam Investment Spammer

Krebs on Security

MAY 22, 2023

pw has been registered and abandoned by several parties since 2014, but the most recent registration data available through DomainTools.com shows it was registered in March 2020 to someone in Krasnodar, Russia with the email address edgard011012@gmail.com. In May 2020, Zipper told another Lolzteam member that quot[.]pw

Scams

Scams DDOS Cryptocurrency Accountability

Signed, Sealed, Delivered! Code Signing Makes Software Yours

Thales Cloud Protection & Licensing

NOVEMBER 7, 2018

That is not much different from what happens with software and firmware code signing today. Whether it is a software upgrade for a program, a mobile application, or firmware for a device, code is signed, sealed, and delivered, and you are left with the future in your hands! PKIs are critical to the secure operation of the IoT.

Software

Software Firmware IoT Authentication

FBI warns of ransomware threat to food and agriculture

Malwarebytes

SEPTEMBER 3, 2021

The state of IoT is poor enough as it is, security wise. As we pointed out in our State of Malware report, published earlier this year, Malwarebytes recorded an eye-watering 607% increase in malware detections in the agriculture sector in 2020. Malwarebytes recorded a 607% increase in agriculture sector attacks in 2020.

Ransomware

Ransomware Manufacturing Passwords Internet

Cisco addresses critical issues in IP Phones and UCS Director

Security Affairs

APRIL 17, 2020

The flaw, tracked as CVE-2020-3161, has been rated as a critical severity and received a CVSS score of 9.8. ” The CVE-2020-3161 vulnerability is caused by the improper validation of HTTP requests, an attacker could exploit the issue by sending a crafted HTTP request to the web server of the vulnerable IP Phones.

Big data

Big data Wireless Advertising Firmware

Botnet operators target multiple zero-day flaws in LILIN DVRs

Security Affairs

MARCH 23, 2020

Netlab shared its findings with LILIN on January 19, 2020, and the vendor addressed the issues with the release of the firmware update (version 2.0b60_20200207). The new firmware released by the vendors validated the hostname passed as input to prevent command execution. ” reads the advisory published by Netlab.

Firmware

Firmware Surveillance Manufacturing Advertising

10,000+ unpatched ABUS Secvest home alarms can be deactivated remotely

Security Affairs

APRIL 25, 2021

Researchers from Eye Security have found thousands of unpatched ABUS Secvest home alarm systems exposed online despite the vendor has addressed a critical bug (CVE-2020-28973) in January. 10,000+ unpatched ABUS Secvest home alarm systems could be remotely disabled exposing customers to intrusions and thefts.

Firmware

Firmware Passwords Authentication Wireless

Secure Your Distributed Medical Devices with Robust Machine Identity Management

Security Boulevard

JULY 11, 2022

In 2020 alone, 560 healthcare facilities in the U.S. Another report from Kaspersky Labs found 33 vulnerabilities in the most widely used data transfer protocol for internet of things (IoT) medical devices, known as MQTT. MQTT is a common solution in most IoT gadgets, including medical devices. Related Posts.

Healthcare

Healthcare IoT Authentication Internet

IoT Unravelled Part 1: It's a Mess. But Then There's Home Assistant

Troy Hunt

NOVEMBER 22, 2020

With the benefit of hindsight, this was a naïve question: Alright clever IoT folks, I've got two of these garage door openers, what do you reckon the best way of connecting them with Apple HomeKit is? link] — Troy Hunt (@troyhunt) April 25, 2020 In my mind, the answer would be simple: "Just buy X, plug it in and you're good to go".

IoT

IoT Firmware Manufacturing Internet

QSnatch malware infected over 62,000 QNAP NAS Devices

Security Affairs

JULY 28, 2020

In mid-June 2020, there were approximately 62,000 infected devices worldwide; of these, approximately 7,600 were in the United States and 3,900 were in the United Kingdom.” The experts observed that once a device has been infected, the malicious code can prevent the installation of firmware updates. ” reads the alert.

Malware

Malware Firmware Advertising Manufacturing

A daily average of 80,000 printers exposed online via IPP

Security Affairs

JUNE 23, 2020

We started regular scanning of all 4 billion routable IPv4 addresses on the 5th of June 2020 and added Open IPP reporting as part of our daily public benefit remediation network reports on the 8th of June 2020. This info includes printer names, locations, models, firmware versions, organization names, and even WiFi network names.

Internet

Internet Internet Firmware Advertising

Tens of thousands of QNAP SOHO NAS devices affected by unpatched RCEs

Security Affairs

APRIL 2, 2021

The vulnerabilities affect QNAP TS-231 SOHO NAS devices running firmware version 4.3.6.1446 that reached end of life (EOL). Below the timeline for this issue: October 12, 2020 – Full disclosure reported to QNAP security team. October 23, 2020 – Sent another e-mail to QNAP security team. March 29, 2021 – Grace period has elapsed.

Firmware

Firmware Internet Internet Authentication

IoT Unravelled Part 3: Security

Japanese Government Will Hack Citizens' IoT Devices

Webinars

Trending Sources

BotenaGo botnet targets millions of IoT devices using 33 exploits

Webinars

IoT Unravelled Part 4: Making it All Work for Humans

Microsoft Finds New NETGEAR Firmware Vulnerabilities

New Ttint IoT botnet exploits two zero-days in Tenda routers

CVE-2021-20090 actively exploited to target millions of IoT devices worldwide

Overview of IoT threats in 2023

Mozi Botnet is responsible for most of the IoT Traffic

EU to Force IoT, Wireless Device Makers to Improve Security

March to 5G could pile on heavier security burden for IoT device manufacturers

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Critical Success Factors to Widespread Deployment of IoT

Why Healthcare IoT Requires Strong Machine Identity Management

SiteLock’s Top Five Cybersecurity Predictions For 2020

IoT Devices and HIPAA Compliance: 6 Things Healthcare Orgs Must Know

IoT and Machine Identity Management in Financial Services

Spyware in the IoT – the Biggest Privacy Threat This Year

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

News Alert: Swissbit introduces small-capacity memory for IIoT, smart city applications

Experts found 15 flaws in Netgear JGS516PE switch, including a critical RCE

Both Mirai and Hoaxcalls IoT botnets target Symantec Web Gateways

A new Zerobot variant spreads by exploiting Apache flaws

Flaws in Medtronic MyCareLink can allow attackers to take over implanted cardiac devices

IoT Unravelled Part 2: IP Addresses, Network, Zigbee, Custom Firmware and Soldering

The Internet of Things Is Everywhere. Are You Secure?

Hacking Wi-Fi networks by exploiting a flaw in Philips Smart Light Bulbs

Flaws in Wyze cam devices allow their complete takeover

Threat actors exploit discontinues Boa web servers to target critical infrastructure

Home Router Analysis: 'No Router is Without Flaws'

Router security in 2021

Flaws in Realtek RTL8170C Wi-Fi module allow hijacking wireless communications

BotenaGo strikes again – malware source code uploaded to GitHub

Interview With a Crypto Scam Investment Spammer

Signed, Sealed, Delivered! Code Signing Makes Software Yours

FBI warns of ransomware threat to food and agriculture

Cisco addresses critical issues in IP Phones and UCS Director

Botnet operators target multiple zero-day flaws in LILIN DVRs

10,000+ unpatched ABUS Secvest home alarms can be deactivated remotely

Secure Your Distributed Medical Devices with Robust Machine Identity Management

IoT Unravelled Part 1: It's a Mess. But Then There's Home Assistant

QSnatch malware infected over 62,000 QNAP NAS Devices

A daily average of 80,000 printers exposed online via IPP

Tens of thousands of QNAP SOHO NAS devices affected by unpatched RCEs

Stay Connected