2021, Firmware and IoT - Cyber Security Informer

CVE-2021-20090 actively exploited to target millions of IoT devices worldwide

Security Affairs

AUGUST 7, 2021

Threat actors are actively exploiting a critical authentication bypass issue (CVE-2021-20090 ) affecting home routers with Arcadyan firmware. Threat actors actively exploit a critical authentication bypass vulnerability, tracked as CVE-2021-20090 , impacting home routers with Arcadyan firmware to deploy a Mirai bot.

IoT

IoT Firmware Authentication Wireless

KrebsOnSecurity Hit By Huge New IoT Botnet “Meris”

Krebs on Security

SEPTEMBER 10, 2021

The assault came from “ Meris ,” the same new “Internet of Things” (IoT) botnet behind record-shattering attacks against Russian search giant Yandex this week and internet infrastructure firm Cloudflare earlier this summer. “The largest share belongs to the version of firmware previous to the current stable one.”

IoT

IoT DDOS Internet Internet

BSides Budapest 2021: Daniel Nussko’s ‘Large-scale Security Analysis of IoT Firmware’

Security Boulevard

APRIL 16, 2022

The post BSides Budapest 2021: Daniel Nussko’s ‘Large-scale Security Analysis of IoT Firmware’ appeared first on Security Boulevard. Our thanks to BSides Budapest IT Security Conference for publishing their superb security videos on the organization’s’ YouTube channel.

Firmware

Firmware IoT Education InfoSec

Attacks Escalating Against Linux-Based IoT Devices

eSecurity Planet

JANUARY 20, 2022

Incidents of malware targeting Linux-based Internet of Things (IoT) devices jumped by more than a third in 2021, with three malware families the primary drivers behind the increase. Kaspersky researchers last year found that such attacks increased by about a third year-over-year in the third quarter 2021.

IoT

IoT DDOS Malware Internet

UDP Technology IP Camera firmware vulnerabilities allow for attacker to achieve root

Malwarebytes

JULY 28, 2021

Researchers at RandoriSec have found serious vulnerabilities in the firmware provided by UDP Technology to Geutebrück and many other IP camera vendors. According to the researchers the firmware supplier UDP Technology fails to respond to their reports despite numerous mails and LinkedIn messages. History lessons.

Firmware

Firmware Technology Authentication IoT

Kalay cloud platform flaw exposes millions of IoT devices to hack

Security Affairs

AUGUST 17, 2021

FireEye Mandiant researchers have discovered a critical vulnerability in the Kalay cloud platform that exposes millions of IoT devices to attacks. The flaw could be easily exploited by a remote attacker to take over an IoT device, the only info needed for the attack is the Kalay unique identifier (UID) of the targeted user. .

IoT

IoT Hacking Social Engineering Firmware

Router security in 2021

SecureList

JUNE 8, 2022

During 2020 and 2021, more than 500 router vulnerabilities were found. The nvd.nist.gov website presents different figures, but they too show a significant increase in the number of router vulnerabilities found in 2020 and 2021. Distribution of router vulnerabilities by priority, 2021 ( download ). Router-targeting malware.

DDOS

DDOS Passwords IoT Firmware

Key Developments in IoT Security

Thales Cloud Protection & Licensing

JULY 15, 2021

Key Developments in IoT Security. Thu, 07/15/2021 - 10:09. Remember the early days of the emergence of Internet of Things (IoT) devices? Vulnerabilities have been discovered in many of these IoT devices. Ellen has extensive experience in cybersecurity, and specifically, the understanding of IoT risk.

IoT

IoT Data privacy Technology Risk

Moobot botnet spreads by exploiting CVE-2021-36260 flaw in Hikvision products

Security Affairs

DECEMBER 8, 2021

The Mirai -based Moobot botnet is rapidly spreading by exploiting a critical command injection flaw, tracked as CVE-2021-36260 , in the webserver of several Hikvision products. The Moobot was first documented by Palo Alto Unit 42 researchers in February 2021, the recent attacks demonstrated that its authors are enhancing their malware.

Firmware

Firmware DDOS Malware IoT

Use cases of secure IoT deployment

Thales Cloud Protection & Licensing

MAY 31, 2021

Use cases of secure IoT deployment. Tue, 06/01/2021 - 06:55. In our previous blog post , we discussed the challenges for securing IoT deployments, and how businesses and consumers benefit from authenticating and validating IoT software and firmware updates. Use case 1: Fortune 500 Healthcare Company.

IoT

IoT Computers and Electronics Manufacturing Firmware

Critical Success Factors to Widespread Deployment of IoT

Thales Cloud Protection & Licensing

FEBRUARY 16, 2021

Critical Success Factors to Widespread Deployment of IoT. Tue, 02/16/2021 - 16:33. Digital technology and connected IoT devices have proliferated across industries and into our daily lives. Finally, IoT devices are being used extensively in smart vehicles and home appliances to provide enhanced user experiences.

IoT

IoT Manufacturing Energy and Utilities Data collection

Guest Blog: TalkingTrust. What’s driving the security of IoT?

Thales Cloud Protection & Licensing

MARCH 10, 2021

What’s driving the security of IoT? Thu, 03/11/2021 - 07:39. First off, connected vehicles and IoT devices are highly attractive targets to hackers. Unlike servers and devices running in enterprise networks, IoT devices are typically shipped direct to consumers, without any control over the network or environment they run in.

IoT

IoT Firmware Manufacturing Encryption

Why Healthcare IoT Requires Strong Machine Identity Management

Security Boulevard

MAY 30, 2022

Why Healthcare IoT Requires Strong Machine Identity Management. The healthcare industry has been leveraging IoT devices for years, steadily increasing its use in facilities and patient care. By 2027, the IoT in Healthcare market is expected to reach $290 billion , up from just $60 billion in 2019. brooke.crothers.

Healthcare

Healthcare IoT Manufacturing Risk

Realtek SDK flaws exploited to deliver Mirai bot variant

Security Affairs

AUGUST 24, 2021

On August 15, firmware security company IoT Inspector published details about the flaws. “On August 16th, three days ago, multiple vulnerabilities in a software SDK distributed as part of Realtek chipsets were disclosed by IoT Inspector Research Lab [1]. ” reported IoT Inspector. ” states SAM experts.

IoT

IoT Firmware Internet Internet

Attackers Exploit Flaw that Could Impact Millions of Routers, IoT Devices

eSecurity Planet

AUGUST 10, 2021

In a recent blog post , the researchers said the bad actors are looking to leverage a path traversal vulnerability that could affect millions of home routers and other Internet of Things (IoT) devices that use the same code base and are manufactured by at least 17 vendors. The responsibility here must lie with the end users.”

IoT

IoT DDOS Internet Internet

IoT Devices and HIPAA Compliance: 6 Things Healthcare Orgs Must Know

SecureWorld News

JUNE 14, 2022

I love the possibilities that Internet of Things (IoT) products bring to our lives. But I'm also very concerned about the associated security and privacy risks that IoT products inherently bring to those using them when controls do not exist or are not used to mitigate the risks. Consider just a few recent statistics.

IoT

IoT Healthcare Risk Firmware

Realtek-based routers, smart devices are being gobbled up by a voracious botnet

Malwarebytes

AUGUST 24, 2021

Mirai hoovers up vulnerable Internet of Things (IoT) devices and adds them to its network of zombie devices, which can then be used to launch huge Distributed Denial of Service (DDoS) attacks. Realtek chipsets are found in many embedded IoT devices. At least 65 vendors are affected. Exactly what Mirai wants. Vulnerabilities.

Firmware

Firmware IoT Internet Internet

Home routers are being hijacked using vulnerability disclosed just 2 days ago

Malwarebytes

AUGUST 9, 2021

On August 3, 2021 a vulnerability that was discovered by Tenable was made public. The vulnerability is listed as CVE-2021-20090. Router firmware. Under the description of CVE-2021-20090 you will find: “a path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02

Firmware

Firmware DDOS Internet Internet

Hikvision cameras could be remotely hacked due to critical flaw

Security Affairs

SEPTEMBER 22, 2021

A critical issue, tracked as CVE-2021-36260, affects more than 70 Hikvision device models and can allow attackers to take over them. A critical vulnerability, tracked as CVE-2021-36260, affects more than 70 Hikvision camera and NVR models and can allow attackers to take over the devices. SecurityAffairs – hacking, IoT).

Hacking

Hacking Firmware IoT Internet

D-Link issues beta hotfix for multiple flaws in DIR-3040 routers

Security Affairs

JULY 17, 2021

Network equipment vendor D-Link has released a firmware hotfix to fix multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router. Network equipment vendor D-Link has released a firmware hotfix to address multiple vulnerabilities affecting the DIR-3040 AC3000-based wireless internet router. score of 7,5.

Firmware

Firmware Wireless Passwords Internet

Vulnerability makes hackers hijack video streams from millions of connected cameras

CyberSecurity Insiders

JUNE 29, 2021

A recent study made by Nozomi Networks, a security company that offers solutions for IoT products has discovered that millions of connected cameras are on the verge of being hijacked by cyber crooks through a vulnerability. It is also urging its customers to update their products with the latest SDK version that was released in March 2021.

Firmware

Firmware IoT Surveillance Manufacturing

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT

IoT Hacking Internet Internet

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT

IoT Hacking Internet Internet

TLStorm flaws allow to remotely manipulate the power of millions of enterprise UPS devices

Security Affairs

MARCH 9, 2022

Researchers from IoT security company Armis have discovered three high-impact security flaws, collectively tracked as TLStorm, affecting APC Smart-UPS devices. The researchers discovered that the firmware upgrades are not properly signed and validated. SecurityAffairs – hacking, IoT). Pierluigi Paganini.

Firmware

Firmware IoT Authentication Backups

A new Zerobot variant spreads by exploiting Apache flaws

Security Affairs

DECEMBER 22, 2022

Microsoft Threat Intelligence Center (MSTIC) researchers discovered a new variant of the Zerobot botnet (aka ZeroStresser) that was improved with the capabilities to target more Internet of Things (IoT) devices. Adopt a comprehensive IoT security solution. The IT giant is tracking this cluster of threat activity as DEV-1061.

IoT

IoT DDOS Malware Firmware

Experts found 15 flaws in Netgear JGS516PE switch, including a critical RCE

Security Affairs

MARCH 14, 2021

Netgear has released security and firmware updates for its JGS516PE Ethernet switch to address 15 vulnerabilities, including a critica remote code execution issue. “The switch internal management web application in firmware versions prior to 2.6.0.43 02 Dec 2020 – Netgear released the new firmware v2.6.0.48

Firmware

Firmware Authentication Hacking Software

NAME:WRECK, a potential IoT trainwreck

Malwarebytes

APRIL 13, 2021

Although never visible to end-users, TCP/IP stacks are libraries that vendors add to their firmware to support internet connectivity and other networking functions like DNS queries for their devices. For those interested in the full technical details the full report is available here and will be presented at Black Hat Asia 2021.

IoT

IoT DNS Internet Internet

Over 80,000 Hikvision cameras can be easily hacked

Security Affairs

AUGUST 23, 2022

Security researchers from CYFIRMA have discovered over 80,000 Hikvision cameras affected by a critical command injection vulnerability tracked as CVE-2021-36260. The Chinese vendor addressed the issue in September 2021, but tens of thousands of devices are yet to be patched. wrote the expert. “.

Hacking

Hacking Firmware Internet Internet

Beastmode Mirai botnet now includes exploits for Totolink routers

Security Affairs

APRIL 2, 2022

The threat actors added TOTOLINK exploits just a week after the exploit codes were publicly released on GitHub in the attempt to compromise the largest number of devices as possible before the owners upgrade to the latest firmware releases. TOTOLINK has already addressed these flaws with the release of new firmware for vulnerable devices.

DDOS

DDOS Firmware Surveillance IoT

An RCE in Annke video surveillance product allows hacking the device

Security Affairs

AUGUST 27, 2021

Researchers at industrial and IoT cybersecurity firm Nozomi Networks have discovered a critical flaw affecting a video surveillance product made by Annke, a popular manufacturer of surveillance systems and solutions. The experts performed reverse engineering of the firmware to fully unrestricted SSH access. – Source Nozomi.

Surveillance

Surveillance Hacking Firmware Manufacturing

Millions of home routers on Mirai Botnet Radar

CyberSecurity Insiders

AUGUST 13, 2021

Tenable researchers claim hackers are exploiting a security flaw termed authentication-bypass vulnerability that is impact routers and internet of things (IoT) devices. What’s interesting about this attack campaign is the hackers are targeting devices running on the firmware that is being supplied by Arcadyan.

Firmware

Firmware DDOS Malware Manufacturing

Threat actors exploit discontinues Boa web servers to target critical infrastructure

Security Affairs

NOVEMBER 24, 2022

The Boa web server is widely used across a variety of devices, including IoT devices, and is often used to access settings and management consoles as well as sign-in screens. The experts pointed out that Boa has been discontinued since 2005. ”reads the report published by Recorded Future. ” reads the report published by Microsoft.

IoT

IoT Firmware Software Risk

The Internet of Things Is Everywhere. Are You Secure?

Security Boulevard

MARCH 18, 2021

The internet of things (IoT) describes the network of interconnected devices embedded with sensors, software, or other technology that exchange data with other devices and systems over the Internet. . This means that currently there are three IoT devices for every one human on the planet. The Technical Challenge of IoT Security.

Internet

Internet Internet IoT Software

New BrakTooth flaws potentially impact millions of Bluetooth-enabled devices

Security Affairs

SEPTEMBER 2, 2021

. “we disclose BrakTooth, a family of new security vulnerabilities in commercial BT stacks that range from denial of service (DoS) via firmware crashes and deadlocks in commodity hardware to arbitrary code execution (ACE) in certain IoTs.” ” reads the post published by the researchers.

Firmware

Firmware Manufacturing IoT Technology

MITRE, CISA Reveal Dangerous Hardware & Software Vulnerabilities

eSecurity Planet

NOVEMBER 4, 2021

CWE-1277 : Firmware Not Updateable – firmware exploitation exposes the victim to a permanent risk without any possibility to patch weaknesses. It’s called hardware pen-testing , and it usually targets IoT devices such as desktop computers, tablets, smartphones, fax machines, printers, and many other electronics.

Software

Software Firmware Computers and Electronics Risk

After Log4j, December’s Patch Tuesday has snuck up on us

Malwarebytes

DECEMBER 16, 2021

In 2021’s final Patch Tuesday, Microsoft included a total of 67 fixes for security vulnerabilities. CVE-2021-42310 Microsoft Defender for IoT Remote Code Execution vulnerability. CVE-2021-43905 Microsoft Office app Remote Code Execution vulnerability. CVE-2021-43890 Windows AppX Installer Spoofing vulnerability.

Wireless

Wireless Passwords Firmware Authentication

The High-Stakes Game of Ensuring IoMT Device Security

SecureWorld News

FEBRUARY 17, 2024

A 2021 Cynerio report revealed a staggering 123% increase in ransomware attacks on healthcare facilities, resulting in more than 500 incidents and costs exceeding $21 billion. Challenges in securing IoMT devices The Internet of Medical Things (IoMT) is essentially a subset of the wider Internet of Things (IoT) concept.

Healthcare

Healthcare Manufacturing Internet Internet

Flaws in Realtek RTL8170C Wi-Fi module allow hijacking wireless communications

Security Affairs

JUNE 3, 2021

Researchers from Israeli IoT security firm Vdoo found multiple vulnerabilities in the Realtek RTL8170C Wi-Fi module that could allow to elevate privileges and hijack wireless communications. Researchers found multiple flaws in the Realtek RTL8170C Wi-Fi module that could be exploited to elevate privileges and hijack wireless communications.

Wireless

Wireless IoT Encryption Firmware

Signed, Sealed, Delivered! Code Signing Makes Software Yours

Thales Cloud Protection & Licensing

NOVEMBER 7, 2018

That is not much different from what happens with software and firmware code signing today. Whether it is a software upgrade for a program, a mobile application, or firmware for a device, code is signed, sealed, and delivered, and you are left with the future in your hands! PKIs are critical to the secure operation of the IoT.

Software

Software Firmware IoT Authentication

FBI warns food and agriculture to brace for seasonal ransomware attacks

Malwarebytes

APRIL 28, 2022

In September 2021 , the agency revealed that ransomware threat actors were ramping up attacks as the sector adopted more smart technologies. During the same month as the FBI’s initial warning, in September 2021, BlackMatter ransomware hit Iowa’s NEW Cooperative, demanding a ransom of $5.9

Ransomware

Ransomware Technology Firmware Internet

Secure Your Distributed Medical Devices with Robust Machine Identity Management

Security Boulevard

JULY 11, 2022

The healthcare industry continued to be one of the the most targeted sector in 2021 , witnessing a 51% increase in breaches since 2019. Another report from Kaspersky Labs found 33 vulnerabilities in the most widely used data transfer protocol for internet of things (IoT) medical devices, known as MQTT. Mon, 07/11/2022 - 16:49.

Healthcare

Healthcare IoT Authentication Internet

BotenaGo strikes again – malware source code uploaded to GitHub

CyberSecurity Insiders

JANUARY 26, 2022

In November 2021, AT&T Alien Labs™ first published research on our discovery of new malware written in the open-source programming language Golang. Alien Labs expects to see new campaigns based on BotenaGo variants targeting routers and IoT devices globally. Executive summary. The team named this malware “BotenaGo.”

Malware

Malware IoT Authentication Antivirus

Tens of thousands of QNAP SOHO NAS devices affected by unpatched RCEs

Security Affairs

APRIL 2, 2021

The vulnerabilities affect QNAP TS-231 SOHO NAS devices running firmware version 4.3.6.1446 that reached end of life (EOL). January 26, 2021 – Sent a notification to QNAP about end of the grace period (which is planned to end on February 12). January 26, 2021 – Reply from QNAP Helpdesk: the problem is confirmed but still in progress.

Firmware

Firmware Internet Internet Authentication

Netgear fixes code execution flaw in many SOHO devices

Security Affairs

NOVEMBER 17, 2021

Netgear addressed a code execution vulnerability, tracked as CVE-2021-34991, in its small office/home office (SOHO) devices. Netgear released security patches that fix the vulnerability in multiple devices and announced that it is testing additional firmware fixes. D6220 – 1.0.0.72 D8500 – 1.0.3.60 DC112A – 1.0.0.56

Firmware

Firmware Authentication Hacking Internet

CVE-2021-20090 actively exploited to target millions of IoT devices worldwide

KrebsOnSecurity Hit By Huge New IoT Botnet “Meris”

Trending Sources

BSides Budapest 2021: Daniel Nussko’s ‘Large-scale Security Analysis of IoT Firmware’

Attacks Escalating Against Linux-Based IoT Devices

UDP Technology IP Camera firmware vulnerabilities allow for attacker to achieve root

Kalay cloud platform flaw exposes millions of IoT devices to hack

Router security in 2021

Key Developments in IoT Security

Moobot botnet spreads by exploiting CVE-2021-36260 flaw in Hikvision products

Use cases of secure IoT deployment

Critical Success Factors to Widespread Deployment of IoT

Guest Blog: TalkingTrust. What’s driving the security of IoT?

Why Healthcare IoT Requires Strong Machine Identity Management

Realtek SDK flaws exploited to deliver Mirai bot variant

Attackers Exploit Flaw that Could Impact Millions of Routers, IoT Devices

IoT Devices and HIPAA Compliance: 6 Things Healthcare Orgs Must Know

Realtek-based routers, smart devices are being gobbled up by a voracious botnet

Home routers are being hijacked using vulnerability disclosed just 2 days ago

Hikvision cameras could be remotely hacked due to critical flaw

D-Link issues beta hotfix for multiple flaws in DIR-3040 routers

Vulnerability makes hackers hijack video streams from millions of connected cameras

The Hacker Mind: Hacking IoT

The Hacker Mind: Hacking IoT

TLStorm flaws allow to remotely manipulate the power of millions of enterprise UPS devices

A new Zerobot variant spreads by exploiting Apache flaws

Experts found 15 flaws in Netgear JGS516PE switch, including a critical RCE

NAME:WRECK, a potential IoT trainwreck

Over 80,000 Hikvision cameras can be easily hacked

Beastmode Mirai botnet now includes exploits for Totolink routers

An RCE in Annke video surveillance product allows hacking the device

Millions of home routers on Mirai Botnet Radar

Threat actors exploit discontinues Boa web servers to target critical infrastructure

The Internet of Things Is Everywhere. Are You Secure?

New BrakTooth flaws potentially impact millions of Bluetooth-enabled devices

MITRE, CISA Reveal Dangerous Hardware & Software Vulnerabilities

After Log4j, December’s Patch Tuesday has snuck up on us

The High-Stakes Game of Ensuring IoMT Device Security

Flaws in Realtek RTL8170C Wi-Fi module allow hijacking wireless communications

Signed, Sealed, Delivered! Code Signing Makes Software Yours

FBI warns food and agriculture to brace for seasonal ransomware attacks

Secure Your Distributed Medical Devices with Robust Machine Identity Management

BotenaGo strikes again – malware source code uploaded to GitHub

Tens of thousands of QNAP SOHO NAS devices affected by unpatched RCEs

Netgear fixes code execution flaw in many SOHO devices

Stay Connected