Security Affairs

MAY 4, 2023

In order to exploit the flaw, an attacker has to upgrade an affected device to a crafted version of the firmware. “This vulnerability is due to a missing authentication process within the firmware upgrade function.” “Cisco has not released firmware updates to address this vulnerability.

Firmware 84

Firmware Education Media Authentication 84

Security Affairs

JULY 10, 2020

Two security researchers have found undocumented Telnet admin account accounts in 29 FTTH devices from Chinese vendor C-Data. Two security researchers have discovered undocumented Telnet admin account accounts in 29 Fiber-To-The-Home (FTTH) devices from Chinese vendor C-Data.

Firmware 95

Firmware Accountability Advertising Manufacturing 95

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. Chaput said that at one point last week the volume of bot accounts being registered for the crypto spam campaign started overwhelming the servers that handle new signups at Mastodon.social.

Scams 244

Scams DDOS Cryptocurrency Accountability 244

Security Affairs

SEPTEMBER 19, 2022

“It is found that our wireless products, FLEXLAN FX3000/2000 series, have a firmware vulnerability. The CVE–2022–36158 flaw is a hidden system command web page that was discovered performing reverse engineering of the firmware used by the device. ” reads the advisory published by Contec. ” continues the researchers.

Wireless 90

Wireless Firmware Passwords Engineering 90

Security Affairs

AUGUST 14, 2023

The procedures allow administrators to provide device information such as server addresses, account information, and firmware updates. The server is used to provide configurations and firmware updates to the devices. In this scenario, an attacker can act as a rogue server and distribute malicious firmware.

Firmware 88

Firmware Authentication Passwords Hacking 88

Security Affairs

JUNE 24, 2021

The threat actors are targeting the USG, ZyWALL, USG FLEX, ATP, and VPN series running on-premise ZLD firmware. Upon accessing the devices, attackers then bypass authentication and establish SSL VPN tunnels with unknown user accounts (i.e. The company states that devices running the Nebula cloud management mode are not impacted.

VPN 109

VPN Firewall Firmware Authentication 109

Security Affairs

JULY 15, 2022

Threat actors behind the campaign used multiple accounts across several social media platforms to advertise password-cracking software for Programmable Logic Controller (PLC), Human-Machine Interface (HMI), and project files. Several websites and multiple social media accounts exist all touting their password “crackers.””

Passwords 111

Passwords Software Firmware Malware 111

Security Affairs

MARCH 28, 2020

On February 10, 2020, the Taiwanese manufacturer DrayTek issued a security bulletin to address the vulnerability with the release of the firmware program 1.5.1. On the 6th Feb, we released an updated firmware to address this issue.” ” reads the security bulletin. firmware or later. .”

Firmware 81

Firmware VPN Accountability Advertising 81

Security Affairs

APRIL 7, 2023

.” The company reported the security breach to the relevant authorities, and it downplayed the incident, saying that the attack had no significant financial and operational impact. In response to the incident, the company announced it is enhancing the information security control measures of its network and infrastructure.

Ransomware 86

Ransomware Firmware Hacking Manufacturing 86

Security Affairs

MARCH 19, 2022

Install updates/patch operating systems, software, and firmware as soon as updates/patches are released. Review domain controllers, servers, workstations, and active directories for new or unrecognized user accounts. Audit user accounts with administrative privileges and configure access controls with least privilege in mind.

Ransomware 96

Ransomware DDOS Passwords Backups 96

Security Affairs

OCTOBER 26, 2021

Install updates/patch operating systems, software, and firmware as soon as updates/patches are released. Review domain controllers, servers, workstations, and active directories for new or unrecognized user accounts. Audit user accounts with administrative privileges and configure access controls with least privilege in mind.

Ransomware 127

Ransomware Firmware Antivirus Accountability 127

Security Affairs

MARCH 10, 2021

One of the members of the group, Tillie Kottmann, revealed that they have gained access to these surveillance cameras using a super admin account for the surveillance company Verkada. Once Verkada became aware of the hack, it has disabled all internal administrator accounts to prevent any unauthorised access.

Surveillance 118

Surveillance Hacking Banking Firmware 118

Security Affairs

SEPTEMBER 3, 2021

Install updates/patch operating systems, software, and firmware as soon as they are released. Use strong passwords and regularly change passwords to network systems and accounts, implementing the shortest acceptable timeframe for password changes. Avoid reusing passwords for multiple accounts. ransomware and phishing scams).

Ransomware 96

Ransomware Passwords Backups Firmware 96

Security Affairs

NOVEMBER 10, 2022

The industrial automation giant ABB addressed the flaw with the release of firmware updates on July 14, 2022. “We chose the simplest approach, reading /etc/shadow and using hashcat cracking the root account password (which turned out to be root:root). ” reads an advisory published by Claroty.

Firmware 129

Firmware Authentication Passwords Manufacturing 129

Security Affairs

MARCH 16, 2022

As early as May 2021, the attackers took advantage of a misconfigured account set to default MFA protocols at a non-governmental organization (NGO), allowing them to enroll a new device for MFA and access the victim network. Contrary to best practices recommended, the account was still active in the organization’s Active Directory.

Accountability 92

Accountability Passwords Authentication Firmware 92

Security Affairs

JUNE 5, 2022

Anonymous: Operation Russia after 100 days of war GitLab addressed critical account take over via SCIM email change LuoYu APT delivers WinDealer malware via man-on-the-side attacks Clipminer Botnet already allowed operators to make at least $1.7 If you want to also receive for free the newsletter with the international press subscribe here.

Spyware 102

Spyware Firmware Ransomware Scams 102

Security Affairs

APRIL 25, 2021

Soliton addressed both flaws in FileZen solutions with the release of firmware versions V4.2.8 The vendor recommended changing system administrator account, reset access control, and installing the latest available version. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. and V5.0.3.

System Administration 115

System Administration Firmware Government Hacking 115

Security Affairs

DECEMBER 17, 2020

The alert also includes the following recommended mitigations to prevent ransomware attacks: Ensure backups are secure and are disconnected from the network at the conclusion of each backup session. Audit user accounts regularly, particularly Remote Monitoring and Management accounts that are publicly accessible.

Ransomware 138

Ransomware Backups Firmware Accountability 138

Security Affairs

JULY 31, 2022

Security Affairs newsletter Round 375 by Pierluigi Paganini A database containing data of 5.4 million Twitter accounts available for sale. The post Security Affairs newsletter Round 376 by Pierluigi Paganini appeared first on Security Affairs. and Blackmatter ransomware U.S. Pierluigi Paganini.

Firmware 71

Firmware Surveillance Malware DDOS 71

Security Affairs

OCTOBER 4, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 86

Ransomware Firmware Advertising Insurance 86

Security Affairs

FEBRUARY 28, 2024

APT28 group deployed Python scripts on compromised EdgeRouters to collect and validate stolen webmail account credentials. The webmail account credentials were collected via cross-site scripting and browser-in-the-browser spear-phishing campaigns. Upgrade to the latest firmware version. ” continues the report.

Energy and Utilities 95

Energy and Utilities Government Firewall Malware 95

Security Affairs

SEPTEMBER 6, 2021

The researchers analyzed the firmware and set up a 2G base station in order to intercept and analyze the devices’ communications. Itel it2160 – The device was spotted transferring some info to the domain asv.transsion.com (Country, Model, Firmware version, Language. Inoi 101 – Clean. What to do?

Mobile 108

Mobile Malware Firmware Manufacturing 108

Security Affairs

JANUARY 21, 2021

“In the meantime, please update the NAS firmware and Malware Remover in the App Center to the latest version if not done already to ensure the latest security patches are applied on the NAS.” Install Security Counselor and run with Intermediate Security Policy (or above). Install a firewall.

Cryptocurrency 113

Cryptocurrency Firmware Malware Passwords 113

Security Affairs

FEBRUARY 14, 2022

Install updates/patch operating systems, software, and firmware as soon as updates/patches are released. Review domain controllers, servers, workstations, and active directories for new or unrecognized user accounts. Audit user accounts with administrative privileges and configure access controls with least privilege in mind.

Ransomware 89

Ransomware Accountability Firmware Antivirus 89

Security Affairs

APRIL 25, 2022

The FBI is seeking any information that can be shared related to the operations of the BlackCat ransomware operation. Below are recommended mitigations included in the alert: Review domain controllers, servers, workstations, and active directories for new or unrecognized user accounts. hard drive, storage device, the cloud).

Ransomware 103

Ransomware Antivirus Passwords Malware 103

Security Affairs

AUGUST 13, 2023

CVE-2023-3266: Improperly Implemented Security Check for Standard (Auth Bypass; CVSS 7.5) of PowerPanel Enterprise software and version 1.44.08042023 of the Dataprobe iBoot PDU firmware. Each should be reachable only from within your organization’s secure intranet. CVE-2023-3261: Buffer Overflow (DOS; CVSS 7.5)

Hacking 86

Hacking Firmware Authentication Software 86

Security Affairs

OCTOBER 22, 2022

“The actors have leveraged privileged accounts to gain access to VMware vCenter Server and reset account passwords [ T1098 ] for ESXi servers in the environment. Below are the mitigations provided in the alert: Install updates for operating systems, software, and firmware as soon as they are released. administrative?accounts,

Ransomware 68

Ransomware VPN Cybercrime Accountability 68

SecureList

FEBRUARY 27, 2024

Possible attack vectors Parents app The robot needs to be linked to a parent’s account before it can be used. From a security researcher’s perspective, this application is particularly interesting because it allows calling to the robot, and monitoring the child’s activities and learning progress.

Education 90

Education Manufacturing Firmware Internet 90

Security Affairs

JULY 8, 2022

Threat actors are targeting devices exposed online with the SMB service enabled, they perform brute-force attacks against accounts using weak passwords. Preliminary investigation indicates that Checkmate attacks via SMB services exposed to the internet, and employs a dictionary attack to break accounts with weak passwords.”

Ransomware 92

Ransomware Encryption Passwords Internet 92

Malwarebytes

MARCH 17, 2021

To prevent attacks: Install security updates for operating systems, software, and firmware as soon as they are released. Avoid reusing passwords for different accounts and implement the shortest acceptable timeframe for password changes. Use multi-factor authentication wherever possible. Consider installing and using a VPN.

Education 107

Education Ransomware Phishing Passwords 107

Security Affairs

APRIL 25, 2023

Working exploits for LAN and WAN interface accesses were respectively reported by Team Viettel and Qrious Security. In March, TP-Link released a firmware update to address multiple issues, including this vulnerability. The vulnerability was first reported to ZDI during the Pwn2Own Toronto 2022 event.

DDOS 90

DDOS Engineering Firmware Architecture 90

Security Affairs

JANUARY 2, 2022

Y2k22 bug in Microsoft Exchange causes failure in email delivery Security Affairs most-read cyber stories of 2021 PulseTV discloses potential credit card breach The Have I Been Pwned service now includes 441K accounts stolen by RedLine malware Multiple flaws in Netgear Nighthawk R6700v3 router are still unpatched How to implant a malware in hidden (..)

Banking 90

Banking Firmware Malware Ransomware 90

Security Affairs

JUNE 15, 2021

Dark Web actors are actively leveraging such tools known as ‘anti-detect’ which enables account takeover (ATO) – to access compromised consumer accounts of various online-services and e-mail providers, also granting the ability to perform fraudulent transactions without being flagged by the current anti-fraud solutions.

Mobile 121

Mobile Authentication Accountability Cyber threats 121

eSecurity Planet

MAY 12, 2023

This document assumes that organizations that fail to meet the update standard due to lack of resources will not hold their IT Department accountable when overworked or overloaded. Broader is always better to control risks, but can be more costly.] Vulnerability Management Policy & Procedure A. Appendix I.

Penetration Testing 108

Penetration Testing Risk Firmware Software 108

Security Affairs

MARCH 26, 2021

. • Implement a recovery plan to maintain and retain multiple copies of sensitive or proprietary data and servers in a physically separate, segmented, secure location (i.e., Install updates/patch operating systems, software, and firmware as soon as they are released. • Only use secure networks and avoid using public Wi-Fi networks. .

Ransomware 144

Ransomware Encryption Passwords Malware 144

Malwarebytes

SEPTEMBER 3, 2021

Install updates/patch operating systems, software, and firmware as soon as they are released. Use strong passwords and regularly change passwords to network systems and accounts, implementing the shortest acceptable timeframe for password changes. Avoid reusing passwords for multiple accounts.

Ransomware 139

Ransomware Manufacturing Passwords Internet 139

Security Affairs

APRIL 7, 2021

Upon compromising the domain administrator account, threat actors could distributee malware to other systems on the same network. “The primary causes of the incident include the use of an outdated and vulnerable firmware version on the Fortigate VPN server (version 6.0.2 ” continues Kaspersky.

VPN 95

VPN Ransomware Antivirus Firmware 95