Firewall, Firmware, Hacking and IoT - Cyber Security Informer

IoT Unravelled Part 3: Security

Troy Hunt

NOVEMBER 25, 2020

In part 1 of this series, I posited that the IoT landscape is an absolute mess but Home Assistant (HA) does an admirable job of tying it all together. I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Now for the big challenge - security. Let's dive into it.

IoT

IoT Firmware Risk Manufacturing

New Ttint IoT botnet exploits two zero-days in Tenda routers

Security Affairs

OCTOBER 5, 2020

Security researchers provided technical details about an IoT botnet dubbed Ttint that has been exploiting two zero-days in Tenda routers. Security researchers at Netlab, the network security division Qihoo 360, have published a report that details an IoT botnet dubbed Ttint. SecurityAffairs – hacking, Ttint botnet).

IoT

IoT Firmware DNS Advertising

Overview of IoT threats in 2023

SecureList

SEPTEMBER 21, 2023

IoT devices (routers, cameras, NAS boxes, and smart home components) multiply every year. The first-ever large-scale malware attacks on IoT devices were recorded back in 2008, and their number has only been growing ever since. Telnet, the overwhelmingly popular unencrypted IoT text protocol, is the main target of brute-forcing.

IoT

IoT DDOS Passwords Malware

Silex malware bricks thousands of IoT devices in a few hours

Security Affairs

JUNE 26, 2019

Security experts warn of a new piece of the Silex malware that is bricking thousands of IoT devices, and the situation could rapidly go worse. Cashdollar explained that the Silex malware trashes the storage of the infected devices, drops firewall rules and wipe network configurations before halting the system. ” reported ZDnet.

IoT

IoT Malware Advertising Firmware

Multiple DDoS botnets were observed targeting Zyxel devices

Security Affairs

JULY 22, 2023

Fortinet FortiGuard Labs researchers warned of multiple DDoS botnets exploiting a vulnerability impacting multiple Zyxel firewalls. The cause of the vulnerability is the improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35. through 5.35.

DDOS

DDOS Firmware VPN Firewall

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature

Security Affairs

OCTOBER 10, 2018

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature, a gift for APT groups and cyber crime syndicates. Xiongmai hereinafter) that are open to hack. The “P2P Cloud” feature bypasses firewalls and effectively allows remote connections into private networks.

Surveillance

Surveillance Hacking Firmware Manufacturing

The Internet of Things Is Everywhere. Are You Secure?

Security Boulevard

MARCH 18, 2021

The internet of things (IoT) describes the network of interconnected devices embedded with sensors, software, or other technology that exchange data with other devices and systems over the Internet. . This means that currently there are three IoT devices for every one human on the planet. The Technical Challenge of IoT Security.

Internet

Internet Internet IoT Software

How to Configure a Router to Use WPA2 in 7 Easy Steps

eSecurity Planet

MARCH 3, 2023

The protocol protects your incoming and outgoing internet traffic and makes it difficult for cyber criminals to intercept your data or hack your device. As long as you’re in there, you should take address any security warnings; perhaps your firewall security setting is too low, for example.

Wireless

Wireless Encryption Passwords IoT

Daixin Team targets health organizations with ransomware, US agencies warn

Security Affairs

OCTOBER 22, 2022

Below are the mitigations provided in the alert: Install updates for operating systems, software, and firmware as soon as they are released. Only store personal patient data on internal systems that are protected by firewalls, and ensure extensive backups are available if data is ever compromised. Pierluigi Paganini.

Ransomware

Ransomware VPN Cybercrime Accountability

"In our modern world, countless applications rely on radio frequency elements" - an Interview with Larbi Ouiyzme

Pen Test

OCTOBER 12, 2023

It's suitable for resource-constrained RF devices, making it a popular choice for low-power IoT applications. What are the common firmware and software vulnerabilities in RF devices that can be exploited? Hard-Coded Passwords: Some RF devices may have passwords hard-coded into their firmware, which is a significant security risk.

Encryption

Encryption Firmware Surveillance Technology

Wireless Security: WEP, WPA, WPA2 and WPA3 Explained

eSecurity Planet

MARCH 1, 2023

WPA3 is the newest protocol and offers better security features such as stronger encryption, protection against dictionary attacks, and easier setting of IoT devices, but has yet to become widely used. Update your router firmware from your router’s manufacturer and install them to ensure your router is up to date and secure.

Wireless

Wireless Encryption Authentication IoT

A daily average of 80,000 printers exposed online via IPP

Security Affairs

JUNE 23, 2020

. “Obviously, these counts only represent devices that are not firewalled and allow direct querying over the IPv4 Internet.” This info includes printer names, locations, models, firmware versions, organization names, and even WiFi network names. . SecurityAffairs – hacking, printers). ” continues the report.

Internet

Internet Internet Firmware Advertising

BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks

Security Affairs

NOVEMBER 1, 2018

Security experts from the IoT security firm Armis, the same that found the BlueBorne Bluetooth flaws, have discovered two serious vulnerabilities in BLE chips designed by Texas Instruments. The flaw can only be exploited if the device using the chip has the over-the-air firmware download (OAD) feature enabled. ” concludes Armis.

Firmware

Firmware Manufacturing IoT Mobile

Top 9 Cybersecurity Challenges SMEs Currently Face

Responsible Cyber

APRIL 8, 2020

IoT Opens Excessive Entry Points. The Internet of Things (IoT) is undeniably the future of technology. It is imperative for employers to now ensure that all IoT devices are set up correctly and no room for a network breach is left. Indeed, it has added convenience to our hectic schedules. Lack of Cybersecurity Knowledge.

Cybersecurity

Cybersecurity DDOS Small Business Phishing

BotenaGo strikes again – malware source code uploaded to GitHub

CyberSecurity Insiders

JANUARY 26, 2022

Alien Labs expects to see new campaigns based on BotenaGo variants targeting routers and IoT devices globally. The Mirai botnet targets mostly routers and IoT devices, and it supports different architectures including Linux x64, different ARM versions, MIPS, PowerPC, and more. Background. The original source of the code is yet unknown.

Malware

Malware IoT Authentication Antivirus

WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS

Security Affairs

OCTOBER 20, 2018

CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. The company provides a firmware with a web interface that mainly uses PHP as a serverside language.

Firmware

Firmware IoT VPN Authentication

Webinar on cyberattacks in Ukraine – summary and Q&A

SecureList

MARCH 14, 2022

We advise organizations to: Take typical measures against DDoS attacks, ransomware and destructive malware, phishing, targeted attacks, supply-chain attacks and firmware attacks. A: We have seen several public “hack” announcements. Install security software on endpoints.

DDOS

DDOS Firmware Internet Internet

Experts hacked 28,000 unsecured printers to raise awareness of printer security issues

Security Affairs

AUGUST 27, 2020

To perform the experiment, we used Internet of Things (IoT) search engines to search for open devices that utilized common printer ports and protocols. To find out how many printers were on the menu for our experiment, we searched for IP addresses with open ports on specialized IoT search engines, such as Shodan and Censys.

Hacking

Hacking IoT Firmware Internet

The Internet of Things: Security Risks Concerns

Spinone

MARCH 17, 2018

The Internet of Things (IoT) is a term used to describe the network of interconnected electronic devices with “smart” technology. The Security Risks of IoT Devices Every piece of hardware and software that you use and is connected to the internet has the potential to be accessed by cybercriminals.

Internet

Internet Internet Risk Computers and Electronics

How to Maximize the Value of Penetration Tests

eSecurity Planet

JUNE 23, 2023

For example, a network and firewall penetration testing expert will be unlikely to also have expertise to test web applications for SQL injection , or to understand internet-of-things (IoT) firmware hacking. Using a third-party penetration tester runs the risk of exposing those secrets through the hacking process.

Penetration Testing

Penetration Testing Social Engineering Risk Data breaches

Too much UPnP-enabled connected devices still vulnerable to cyber attacks

Security Affairs

MARCH 7, 2019

Yang explained that cameras, printers, NAS devices, Smart TVs, and routers which use UPnP for streaming, sharing, and service discovery are exposed to attacks, threat actors could use them to potentially bypass firewalls and attack local network. SecurityAffairs – UPnP-enabled devices, hacking). Pierluigi Paganini.

Cyber Attacks

Cyber Attacks Advertising Firmware Data collection

DDoS attacks in Q4 2020

SecureList

FEBRUARY 16, 2021

After the attacks came to light, the manufacturer promptly released a firmware update for configuring verification of incoming requests. Educational institutions are recommended to use anti-DDoS solutions and strong firewall settings, and partner up with ISPs. Gaming platforms didn’t escape cybercriminal attention either.

DDOS

DDOS Cryptocurrency Marketing Internet

VulnRecap 3/4/24 – Ivanti, Ubiquiti, AppLocker Under Attack

eSecurity Planet

MARCH 4, 2024

The fix: To eliminate malware infections, perform a factory reset, upgrade to the latest firmware, change all default usernames and passwords, and adjust firewall rules to block exposure to unwanted remote management services. The fix: Update libraries and instances to versions patched after February 8, 2024.

IoT

IoT Internet Internet Ransomware

Advanced threat predictions for 2023

SecureList

NOVEMBER 14, 2022

Looking back at past leaks of private companies providing such services, such as in the case of Hacking Team, we learned that many states all over the world were buying these capabilities, whether to complement their in-house technologies or as a stand-alone solution they couldn’t develop.

Firmware

Firmware Surveillance Mobile Telecommunications

Cyber Security Informer

IoT Unravelled Part 3: Security

New Ttint IoT botnet exploits two zero-days in Tenda routers

Trending Sources

Overview of IoT threats in 2023

Silex malware bricks thousands of IoT devices in a few hours

Multiple DDoS botnets were observed targeting Zyxel devices

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature

The Internet of Things Is Everywhere. Are You Secure?

How to Configure a Router to Use WPA2 in 7 Easy Steps

Daixin Team targets health organizations with ransomware, US agencies warn

"In our modern world, countless applications rely on radio frequency elements" - an Interview with Larbi Ouiyzme

Wireless Security: WEP, WPA, WPA2 and WPA3 Explained

A daily average of 80,000 printers exposed online via IPP

BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks

Top 9 Cybersecurity Challenges SMEs Currently Face

BotenaGo strikes again – malware source code uploaded to GitHub

WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS

Webinar on cyberattacks in Ukraine – summary and Q&A

Experts hacked 28,000 unsecured printers to raise awareness of printer security issues

The Internet of Things: Security Risks Concerns

How to Maximize the Value of Penetration Tests

Too much UPnP-enabled connected devices still vulnerable to cyber attacks

DDoS attacks in Q4 2020

VulnRecap 3/4/24 – Ivanti, Ubiquiti, AppLocker Under Attack

Advanced threat predictions for 2023

Stay Connected