Hacking Digital License Plates
Schneier on Security
DECEMBER 17, 2024
By removing a sticker on the back of the plate and attaching a cable to its internal connectors, he’s able to rewrite a Reviver plate’s firmware in a matter of minutes.
Hacking the Sony Playstation 5
Schneier on Security
NOVEMBER 10, 2021
I just don’t think it’s possible to create a hack-proof computer system, especially when the system is physically in the hands of the hackers. The two exploits are particularly notable due to the level of access they theoretically give to the PS5’s software.
Hacking 
315
315 Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
MY TAKE: Why locking down ‘firmware’ has now become the next big cybersecurity challenge
The Last Watchdog
JUNE 10, 2019
Locking down firmware. Starks Federal Communications Commission member Geoffrey Starks recently alluded to the possibility that China may have secretly coded the firmware in Huawei’s equipment to support cyber espionage and cyber infrastructure attacks. telecoms by Chinese tech giant Huawei.
Firmware 233
233 
Hacking a Power Supply
Schneier on Security
JULY 21, 2020
This hack targets the firmware on modern power supplies. Yes, power supplies are also computers.).
Hacking 215
215 
Hacking Hardware Security Modules
Schneier on Security
JUNE 20, 2019
Finally, we exploit a cryptographic bug in the firmware signature verification to upload a modified firmware to the HSM. This firmware includes a persistent backdoor that survives a firmware update. The presented attacks allow retrieving all HSM secrets remotely, including cryptographic keys and administrator credentials.
Firmware 237
237 
SHARED INTEL: How ‘memory attacks’ and ‘firmware spoilage’ circumvent perimeter defenses
The Last Watchdog
NOVEMBER 20, 2019
What does Chinese tech giant Huawei have in common with the precocious kid next door who knows how to hack his favorite video game? Related: Ransomware remains a scourge The former has been accused of placing hidden backdoors in the firmware of equipment distributed to smaller telecom companies all across the U.S.
Firmware 174
174 
Japanese Government Will Hack Citizens' IoT Devices
Schneier on Security
JANUARY 28, 2019
Hackers can also build botnets with the help of exploits and vulnerabilities in router firmware, but the easiest way to assemble a botnet is by collecting the ones that users have failed to secure with custom passwords. I am interested in the results of this survey.
IoT 233
233 
Firmware attacks, a grey area in cybersecurity of organizations
Security Affairs
APRIL 5, 2021
A new report published by Microsoft revealed that 80% of global enterprises were victims of a firmware-focused cyberattack. The study pointed out that only 29% of the targeted organizations have allocated budgets to protect firmware. Firmware vulnerabilities are also exacerbated by a lack of awareness and a lack of automation.”
Firmware 145
145 
Crashing iPhones with a Flipper Zero
Schneier on Security
NOVEMBER 6, 2023
The Flipper Zero is an incredibly versatile hacking device. These types of hacks have been possible for decades, but they require special equipment and a fair amount of expertise. Now it can be used to crash iPhones in its vicinity by sending them a never-ending stream of pop-ups.
Firmware 310
310 
UEFICANHAZBUFFEROVERFLOW flaw in Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models
Security Affairs
JUNE 21, 2024
A serious vulnerability (CVE-2024-0762) in the Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models. Firmware security firm Eclypsium discovered a vulnerability, tracked as CVE-2024-0762 (CVSS of 7.5), in the Phoenix SecureCore UEFI firmware. ” concludes the report.
Firmware 134
134 
China-linked APT BlackTech was spotted hiding in Cisco router firmware
Security Affairs
SEPTEMBER 27, 2023
US and Japanese authorities warn that a China-linked APT BlackTech planted backdoor in Cisco router firmware to hack the businesses in both countries. The state-sponsored hackers was observed using a custom firmware backdoor which was enabled and disabled by sending specially crafted TCP or UDP packets to the devices.
Firmware 136
136 
Android devices shipped with backdoored firmware as part of the BADBOX network
Security Affairs
OCTOBER 8, 2023
Researchers warn that more than 70,000 Android smartphones, CTV boxes, and tablets were shipped with backdoored firmware as part of BADBOX network. Cybersecurity researchers at Human Security discovered a global network of consumer products, dubbed BADBOX, with firmware backdoors installed and sold through a compromised hardware supply chain.
Firmware 145
145 
New iLOBleed Rootkit, the first time ever that malware targets iLO firmware
Security Affairs
DECEMBER 30, 2021
iLOBleed, is a previously undetected rootkit that was spotted targeting the HP Enterprise’s Integrated Lights-Out ( iLO ) server management technology to tamper with the firmware modules and wipe data off the infected systems. SecurityAffairs – hacking, iLOBleed). ” reads the report published by the expers.
Firmware 144
144 
Three UEFI Firmware flaws found in tens of Lenovo Notebook models
Security Affairs
JULY 13, 2022
IT giant Lenovo released security fixes to address three vulnerabilities that impact the UEFI firmware shipped with over 70 product models. The three buffer overflow vulnerabilities in UEFI firmware, tracked as CVE-2022-1890, CVE-2022-1891, and CVE-2022-1892, were discovered by researchers from ESET. SecurityAffairs – hacking, Lenovo).
Firmware 141
141 
Hacking Wireless Bicycle Shifters
Schneier on Security
AUGUST 20, 2024
This is yet another insecure Internet-of-things story , this one about wireless gear shifters for bicycles. These gear shifters are used in big-money professional bicycle races like the Tour de France, which provides an incentive to actually implement this attack. Research paper. Another news story. Slashdot thread.
Wireless 275
275 
Western Digital customers have to update their My Cloud devices to latest firmware version
Security Affairs
DECEMBER 18, 2021
My Cloud OS firmware is reaching the end of support, Western Digital customers have to update their WD My Cloud devices to the latest version. Devices on these older firmware versions will not receive security fixes or technical support.” SecurityAffairs – hacking, Western Digital). Pierluigi Paganini.
Firmware 134
134 
Google fixed an actively exploited zero-day in the Pixel Firmware
Security Affairs
JUNE 13, 2024
Google is warning of a security vulnerability impacting its Pixel Firmware that has been actively exploited in the wild as a zero-day. Google warned of an elevation of privilege vulnerability, tracked as CVE-2024-32896, in the Pixel Firmware, which has been exploited in the wild as a zero-day. ” reads the advisory.
Firmware 124
124 
Another 0-Day Looms for Many Western Digital Users
Krebs on Security
JULY 2, 2021
Researchers Radek Domanski and Pedro Ribeiro originally planned to present their findings at the Pwn2Own hacking competition in Tokyo last year. That update effectively nullified their chances at competing in Pwn2Own, which requires exploits to work against the latest firmware or software supported by the targeted device.
Firmware 358
358 
Intel addresses 2 high-severity issues in BIOS firmware of several processors
Security Affairs
NOVEMBER 16, 2021
Intel disclosed two high-severity vulnerabilities, tracked as CVE-2021-0157 and CVE-2021-0158, that affect the BIOS firmware in several processor families. Intel disclosed two high-severity vulnerabilities that affect the BIOS firmware in several processor families, both vulnerabilities have received a CVSS v3 score of 8.2.
Firmware 124
124 
Sophos backports fix for CVE-2022-3236 for EOL firewall firmware versions due to ongoing attacks
Security Affairs
DECEMBER 13, 2023
Sophos backports the patch for CVE-2022-3236 for end-of-life (EOL) firewall firmware versions due to ongoing attacks exploiting the issue. No action is required if organizations have upgraded their firewalls to a supported firmware version after September 2022. All the vulnerable devices are running end-of-life (EOL) firmware.
Firmware 131
131 
NFC Flaws in POS Devices and ATMs
Schneier on Security
JUNE 28, 2021
Now Rodriguez has built an Android app that allows his smartphone to mimic those credit card radio communications and exploit flaws in the NFC systems’ firmware. He declined to specify or disclose those flaws publicly due to nondisclosure agreements with the ATM vendors.
Firmware 292
292 
Some firmware bugs in HP business devices are yet to be fixed
Security Affairs
SEPTEMBER 12, 2022
Six high-severity firmware bugs affecting several HP Enterprise devices are yet to be patched, some of them since July 2021. The Binarly security research team reported several HP Enterprise devices are affected by six high-severity firmware vulnerabilities that are yet to be patched, and some of them have been disclosed more than a year ago.
Firmware 108
108 
BlackLotus Malware Hijacks Windows Secure Boot Process
Schneier on Security
MARCH 8, 2023
These sophisticated pieces of malware target the UEFI—short for Unified Extensible Firmware Interface —the low-level and complex chain of firmware responsible for booting up virtually every modern computer. As the mechanism that bridges a PC’s device firmware with its operating system, the UEFI is an OS in its own right.
Malware 266
266 
Mazda Connect flaws allow to hack some Mazda vehicles
Security Affairs
NOVEMBER 9, 2024
As of the publication, no publicly known vulnerabilities have been identified in the latest firmware version. CVE-2024-8356 : Unsigned code vulnerability in VIP MCU, allowing unauthorized firmware uploads that could impact vehicle subsystems. ” concludes the report.
Hacking 129
129 
Hikvision cameras could be remotely hacked due to critical flaw
Security Affairs
SEPTEMBER 22, 2021
The vulnerability is an unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware, it was discovered by a security researcher that goes online with the moniker “Watchful IP.”. The expert pointed out that every firmware developed since 2016 has been tested and found to be vulnerable.
Hacking 131
131 
How to hack Wincor Cineo ATMs to bypass black-box attack protections and withdraw cash
Security Affairs
NOVEMBER 1, 2021
Researchers demonstrated how crooks could hack Diebold Nixdorf’s Wincor Cineo ATMs to bypass black-box attack protections and withdraw cash. An attacker with access to the dispenser controller’s USB port can install an outdated or modified firmware version to bypass the encryption and make cash withdrawals. score of 6.8.
Hacking 136
136 
Over 178,000 SonicWall next-generation firewalls (NGFW) online exposed to hack
Security Affairs
JANUARY 15, 2024
. “The latest available firmware protects against both vulnerabilities, so be sure to upgrade immediately (and make sure the management interface isn’t exposed to the internet).” ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, SonicWall)
Firewall 143
143 
IoT Unravelled Part 3: Security
Troy Hunt
NOVEMBER 25, 2020
I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Let's got through the options: Firmware Patching I'll start with the devices themselves and pose a question to you: can you remember the last time you patched the firmware in your light globes? Or vibrator.
IoT 355
355 
The Internet of Things is a Complete Mess (and how to Fix it)
Troy Hunt
JULY 13, 2021
Almost - there's still that cloud dependency and there's really only 2 ways around that: Control the existing device locally with the original firmware Flash the device with 3rd party firmware that supports local control Let's explore these more starting with the first option because it feels like the most low-friction path.
Internet 357
357 
Attack Against PC Thunderbolt Port
Schneier on Security
MAY 12, 2020
All the evil maid needs to do is unscrew the backplate, attach a device momentarily, reprogram the firmware, reattach the backplate, and the evil maid gets full access to the laptop," says Ruytenberg, who plans to present his Thunderspy research at the Black Hat security conference this summeror the virtual conference that may replace it. "All
Firmware 248
248 
Hacking the infotainment system used in Mercedes-Benz cars
Security Affairs
MAY 19, 2021
Anyway, the experts didn’t find a way to compromise the T-Box, they only demonstrated how to send arbitrary CAN messages from T-Box and bypass the code signing mechanism to fash a custom SH2A MCU firmware by utilizing a vulnerability in SH2A firmware on a debug version T-Box. SecurityAffairs – hacking, Mercedes).
Hacking 135
135 
China-linked APT Mustang Panda targets TP-Link routers with a custom firmware implant
Security Affairs
MAY 16, 2023
China-linked APT group Mustang Panda employed a custom firmware implant targeting TP-Link routers in targeted attacks since January 2023. In most recent attacks observed by Check Point, the threat actors employed custom firmware implant designed explicitly for TP-Link routers. ” reads the report published by Check point.
Firmware 98
98 
Over 80,000 Hikvision cameras can be easily hacked
Security Affairs
AUGUST 23, 2022
The vulnerability is an unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware, it was discovered by a security researcher that goes online with the moniker “Watchful IP.”. The expert confirmed that every firmware developed since 2016 has been tested and found to be vulnerable. Pierluigi Paganini.
Hacking 124
124 
Tianfu Cup 2020 – 5 minutes to hack Windows 10, Ubuntu iOS, VMWare EXSi, and others
Security Affairs
NOVEMBER 9, 2020
Many popular OS and applications have been hacked during this year’s edition of the Tianfu Cup hacking competition. This year’s edition of the Tianfu Cup hacking competition was very prolific, bug bounty hackers have discovered multiple vulnerabilities in multiple software and applications. Pierluigi Paganini.
Hacking 143
143 
CVE-2020-15782 flaw in Siemens PLCs allows remote hack
Security Affairs
MAY 28, 2021
Industrial cybersecurity firm Claroty discovered a new flaw in Siemens PLCs that can be exploited by a remote and unauthenticated attacker to hack the devices. The flaw impacts SIMATIC S7-1200 and S7-1500 CPUs, the vendor has already released firmware updates for the impacted systems. SecurityAffairs – hacking, Siemens PLCs).
Hacking 143
143 
Millions of Pixel devices can be hacked due to a pre-installed vulnerable app
Security Affairs
AUGUST 16, 2024
The “Showcase.apk” package, developed by Smith Micro, is part of the firmware image on millions of Android Pixel phones, potentially enhancing sales in Verizon stores. The app is preinstalled in Pixel firmware and included in Google’s OTA updates for Pixel devices.
Hacking 143
143 
Second-ever UEFI rootkit used in North Korea-themed attacks
Security Affairs
OCTOBER 5, 2020
A China-linked threat actor used UEFI malware based on code from Hacking Team in attacks aimed at organizations with an interest in North Korea. The experts were investigating several suspicious UEFI firmware images when discovered four components, some of which were borrowing the source code a Hacking Team spyware.
Firmware 145
145 
Flipper Zero gets a big firmware upgrade, and some amazing new features
Zero Day
SEPTEMBER 11, 2024
After three years of development, the portable hacking tool gets its first major firmware update - to version 1.0!
Firmware 75
75 
SonicWall warns of an exploitable SonicOS vulnerability
Security Affairs
JANUARY 8, 2025
” SonicWall is urging customers to upgrade the SonicOS firmware of their firewalls to patch an authentication bypass vulnerability tracked as CVE-2024-53704 (CVSS score of 8.2). The same firmware upgrade contains mitigations for additional, less-critical vulnerabilities.”
Firewall 115
115 
CVE-2023-23560 flaw exposes 100 Lexmark printer models to hack
Security Affairs
JANUARY 27, 2023
Lexmark released a security firmware update to fix a remote code execution flaw, tracked as CVE-2023-23560, that impacts more than 100 printer models. Lexmark has released a security firmware update to address a remote code execution vulnerability, tracked as CVE-2023-23560, that impacts more than 100 printer models.
Hacking 98
98 
KindleDrip exploit – Hacking a Kindle device with a simple email
Security Affairs
JANUARY 22, 2021
Experts also published a video PoC of the KindleDRIP exploit chain on a new Kindle 10 running firmware version 5.13.2. SecurityAffairs – hacking, KindleDRIP). The post KindleDrip exploit – Hacking a Kindle device with a simple email appeared first on Security Affairs. Pierluigi Paganini.
Hacking 144
144 
Expert found a secret backdoor in Zyxel firewall and VPN
Security Affairs
JANUARY 1, 2021
Zyxel addressed a critical flaw in its firmware, tracked as CVE-2020-29583 , related to the presence of a hardcoded undocumented secret account. The Taiwanese vendor Zyxel has addressed a critical vulnerability in its firmware related to the presence of a hardcoded undocumented secret account. “Firmware version 4.60
Firewall 145
145 
Recent Tesla Hacks Highlight Importance of Protecting Connected Devices
eSecurity Planet
FEBRUARY 2, 2024
Teslas Get the Spotlight in Recent Ethical Hacking Efforts Researchers have discovered multiple vulnerabilities within Teslas since March 2023. Rapid7’s Zero Day Initiative hosts an event called Pwn2Own, and at the 2023 event, computer security firm Synactiv hacked a Tesla computer within two minutes.
Hacking 118
118 
Hackers infect TP-Link router firmware to attack EU entities
Bleeping Computer
MAY 16, 2023
A Chinese state-sponsored hacking group named "Camaro Dragon" infects residential TP-Link routers with a custom "Horse Shell" malware used to attack European foreign affairs organizations. [.]
Firmware 113
113 
Let's personalize your content