Security Affairs

MAY 14, 2023

Please vote for Security Affairs ( [link] ) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections where is reported Securityaffairs or my name Pierluigi Paganini Please nominate Security Affairs as your favorite blog.

Data breaches 89

Data breaches DDOS Artificial Intelligence Ransomware 89

Security Affairs

DECEMBER 29, 2019

The incident was independently verified by the authors of the blog IPVM that focuses on video surveillance products. It was published in conjunction with a blog post from a private security company also published on December 26th.” “We were first contacted through a support ticket at 9:21 a.m.

IoT 63

IoT Accountability Advertising Wireless 63

SecureList

JUNE 20, 2023

In this blog post, we’ll discuss the results of a vulnerability research study focused on a popular model of smart pet feeder. The findings of the study reveal a number of serious security issues, including the use of hard-coded credentials, and an insecure firmware update process.

Firmware 86

Firmware Passwords Manufacturing Mobile 86

The Last Watchdog

MAY 16, 2022

Then there are firmware developers, transport agencies, testing facilities, and security evaluation agencies that handle the device before it is sent to the corporate client. The TCU deploys AI-based runtime threat-detection surveillance and remediation for enhanced tamper •. Threat detection. Traceability and accountability.

Cyber Attacks 273

Cyber Attacks Firmware Artificial Intelligence Manufacturing 273

SecureList

NOVEMBER 30, 2021

Based on forensic analysis of numerous mobile devices, Amnesty International’s Security Lab found that the software was repeatedly used in an abusive manner for surveillance. We confirmed that several infrastructures on the blog overlapped with our previously published reporting about Lazarus group’s ThreatNeedle cluster.

Malware 100

Malware Mobile Spyware Surveillance 100

SecureList

APRIL 27, 2022

In December we were made aware of a UEFI firmware-level compromise through logs from our firmware scanning technology. Further analysis showed that the attackers modified a single component within the firmware to append a payload to one of its sections and incorporate inline hooks within particular functions.

Malware 129

Malware Firmware Government Phishing 129

SecureList

OCTOBER 26, 2021

This campaign was also covered by researchers at Zscaler in a blog post. We published a blog post at that time detailing the technical details of ShadowPad and its supply-chain attack campaign after its initial discovery, when it was deployed by an APT group known as Barium or APT41.

Malware 139

Malware Government Surveillance Spyware 139

SecureList

NOVEMBER 14, 2022

Last June, Google’s TAG team released a blog post documenting attacks on Italian and Kazakh users that they attribute to RCS Lab, an Italian offensive software vendor. In line with our predictions, we released two blog posts in 2022 introducing sophisticated low-level bootkits. Drone hacking!

Firmware 105

Firmware Surveillance Mobile Telecommunications 105