article thumbnail

McAfee Enterprise ATR Uncovers Vulnerabilities in Globally Used B. Braun Infusion Pump

McAfee

Lastly, the pump runs its own custom Real Time Operating System (RTOS) and firmware on a M32C microcontroller. We could not find one ready to use; however, the web interface has an option to backup and export settings which relies on tarring a folder containing a handful of files and encrypting it with AES using a user-provided password.

article thumbnail

APT Attacks & Prevention

eSecurity Planet

Chinese APT attackers developed a Unified Extensible Firmware Interface (UEFI) malware that hijacks the booting sequence and is saved in the SPI flash memory of the motherboard beyond where most tools might remove it. Also read: PowerShell Is Source of More Than a Third of Critical Security Threats. Lessons Learned.

Firewall 108