Krebs on Security

JULY 25, 2023

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. SocksEscort[.]com com , is what’s known as a “SOCKS Proxy” service.

Malware 209

Malware VPN Internet Internet 209

Security Affairs

MAY 11, 2023

“Successful exploits could allow attackers to monitor users’ internet activity, highjack internet connections and redirect traffic to malicious websites or inject malware into network traffic. These vulnerabilities require an attacker to have your WiFi password or an Ethernet connection to your network to be exploited.”

Hacking 96

Hacking Firmware Authentication DNS 96

Security Affairs

JANUARY 6, 2021

The Taiwanese vendor Zyxel has recently addressed a critical vulnerability in its firmware, tracked as CVE-2020-29583 , related to the presence of a hardcoded undocumented secret account. Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. Firmware version 4.60

Firmware 111

Firmware Passwords Accountability VPN 111

Security Affairs

APRIL 25, 2021

Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to reconfigure or disable the alarm system.” “Based on this information, we did a quick investigation to see how popular the system is.

Firmware 111

Firmware Passwords Authentication Wireless 111

Security Affairs

SEPTEMBER 19, 2022

These devices are installed in airplanes to offer internet connectivity to the passengers, the above vulnerabilities can be exploited by an attacker to compromise the inflight entertainment system and potentially conduct other malicious activities. The experts recommend to randomly generate a different password for each device.

Wireless 92

Wireless Firmware Passwords Engineering 92

Malwarebytes

AUGUST 23, 2022

No username or password is needed, nor are any actions needed from the camera owner, and the attack is not detectable by any logging on the camera itself. The flaw is tracked as CVE-2021-36260 and was addressed by Hikvision via a firmware update in September 2021. The critical bug received a 9.8 The critical bug received a 9.8

Firmware 84

Firmware VPN Internet Internet 84

Security Affairs

SEPTEMBER 22, 2021

The vulnerability is an unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware, it was discovered by a security researcher that goes online with the moniker “Watchful IP.”. No username or password needed nor any actions need to be initiated by the camera owner. ” wrote the expert.

Hacking 113

Hacking Firmware IoT Internet 113

SecureWorld News

FEBRUARY 17, 2024

Being constantly connected to the internet, they are either protected by basic passwords or, in some cases, have no password protection at all. Challenges in securing IoMT devices The Internet of Medical Things (IoMT) is essentially a subset of the wider Internet of Things (IoT) concept.

Healthcare 96

Healthcare Manufacturing Internet Internet 96

Security Affairs

APRIL 15, 2024

The Blackjack group is believed to be affiliated with Ukrainian intelligence services that carried out other attacks against Russian targets, including an internet provider and a military infrastructure. The site also hosts password dumps allegedly stolen from the Russian company. Access to 112 Emergency Service.

Malware 125

Malware Firmware IoT Hacking 125

Security Affairs

DECEMBER 17, 2019

TP-Link has addressed a critical vulnerability impacting some TP-Link Archer routers that could allow attackers to login without passwords. “In such an event, the victim could lose access to the console and even a shell, and thereby would not be able to re-establish a new password.” ” continues the post.

Passwords 95

Passwords Advertising Firmware Authentication 95

Security Affairs

DECEMBER 24, 2022

Unlike the D-Link analysis, the researchers has no physical access to the device and attempted to retrieve the password from the config. “The firmware is basically a merge of 3 sections, the LZMA section is the kernel, at 0x148CD6 the root-fs and at 0x90BD36 the www content.” A firmware fix has been released.

Firmware 98

Firmware Passwords Hacking Cybersecurity 98

Malwarebytes

SEPTEMBER 22, 2021

In a detailed post on Github , security researcher Watchful_IP describes how he found that the majority of the recent camera product ranges of Hikvision cameras are susceptible to a critical, unauthenticated, remote code execution (RCE) vulnerability, even with the latest firmware. Hangzhou Hikvision Digital Technology Co.,

Firmware 135

Firmware Surveillance Marketing VPN 135

SecureList

FEBRUARY 27, 2024

” For instance, educational robots that connect to the internet and support video calls. ” Interactive features include gaming and educational applications for children, a voice assistant, internet access and connection to the parent app for smartphones. In other words, this is a “tablet on wheels.”

Education 94

Education Manufacturing Firmware Internet 94

Security Affairs

JUNE 19, 2023

ASUS addressed critical vulnerabilities in multiple router models, urging customers to immediately install firmware updates. ASUS is warning customers to update some router models to the latest firmware to address critical vulnerabilities. “Update your router to the latest firmware.

Firmware 85

Firmware VPN Wireless Passwords 85

Security Affairs

AUGUST 23, 2022

The vulnerability is an unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware, it was discovered by a security researcher that goes online with the moniker “Watchful IP.”. No username or password needed nor any actions need to be initiated by the camera owner. wrote the expert. “.

Hacking 113

Hacking Firmware Internet Internet 113

Security Affairs

AUGUST 4, 2022

“The attack can be performed without user interaction if the management interface of the device has been configured to be internet facing. All the affected models have a patched firmware available for download on the vendor’s website.” Leak of the sensitive data stored on the router (keys, administrative passwords, etc.)

Hacking 98

Hacking Internet Internet Passwords 98

SecureWorld News

OCTOBER 8, 2023

Armed with this information, hackers often try to exploit vulnerabilities in home devices and networks to breach corporate networks. Turn off the internet connection if you will not be using it for an extended period. Here are some key safety guidelines to consider: Restrict who can view your personal information.

Firmware 86

Firmware IoT Accountability Passwords 86

SecureList

JUNE 3, 2024

The attackers were able to bypass this hardware-based security protection using another hardware feature of Apple-designed SoCs (System on a Chip): they did this by writing the data, destination address and data hash to unknown hardware registers of the chip that are not used by the firmware.

Banking 81

Banking Malware Computers and Electronics Mobile 81

Troy Hunt

NOVEMBER 25, 2020

I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Back to the bit about risks impacting data collected by IoT devices and back again to CloudPets, Context Security's piece aligned with my own story about kids' CloudPets messages being left exposed to the internet.

IoT 357

IoT Firmware Risk Manufacturing 357

Security Affairs

JANUARY 16, 2023

Milisic discovered pre-loaded malware into its firmware. Milisic purchased the T95 Android TV box to run Pi-hole , which is a Linux network-level advertisement and Internet tracker blocking application. The malicious code embedded in the firmware of the device acts like the Android CopyCat malware. ” continues the expert.

Malware 97

Malware Firmware DNS Internet 97

Security Affairs

SEPTEMBER 18, 2021

In short, it goes from a newline injection in the password field, through being able to write a file with constant uncontrolled content of 2 (like, one byte 32h), through a DoS and session crafting (which yields an admin web UI user), to an eventual post-auth shell injection (which yields full root).” .” Coldwind explained.

Firmware 90

Firmware Engineering Passwords Hacking 90

Security Affairs

SEPTEMBER 6, 2019

600,000 GPS trackers left exposed online with a default password of ‘123456’ Avast researchers found at least 600,000 GPS trackers manufactured by a Chinese vendor that were exposed online with a default password of “123456.” The use of default passwords represents a serious problem also for the Chinese vendor.

Passwords 81

Passwords Manufacturing Advertising Firmware 81

Security Affairs

JANUARY 21, 2021

The malware targets QNAP NAS devices exposed online that use weak passwords. “According to analysis, QNAP NAS can become infected when they are connected to the Internet with weak user passwords.” Use stronger admin passwords. Use stronger passwords for database administrators. “QNAP Systems, Inc.

Cryptocurrency 113

Cryptocurrency Firmware Malware Passwords 113

Security Affairs

MAY 7, 2021

HideezKey- This is a deep-dive into a nice concept for a security token & password manager that turned into a horrible product due to lack of proper R&D and Threat Modeling. Overall, most of the information gathered so far is matching Hideez’ manual specs. In this case: 2AQ5UHIDEEZKEY2. known-plaintext attack).

Firmware 101

Firmware Passwords Password Management Encryption 101

Hacker Combat

JUNE 3, 2021

Industrial switches are made using universal firmware developed by Korenix Technology, a leading provider for industrial networking solutions based in Taiwan. Korenix has developed another firmware that the organization incorporates in its JetNet industrial switches. Malicious firmware and bootloader uploads are possible too.

Firmware 78

Firmware Energy and Utilities Cyber Attacks Surveillance 78

Security Affairs

JULY 16, 2018

A security researcher discovered that the IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs. The IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs, the discovery was made by security researcher Ankit Anubhav, Principal Researcher at NewSky Security.

IoT 60

IoT Engineering Passwords Firmware 60

Security Affairs

SEPTEMBER 3, 2021

. “Cyber criminal threat actors exploit network vulnerabilities to exfiltrate data and encrypt systems in a sector that is increasingly reliant on smart technologies, industrial control systems, and internet-based automation systems. Install updates/patch operating systems, software, and firmware as soon as they are released.

Ransomware 98

Ransomware Passwords Backups Firmware 98

Malwarebytes

SEPTEMBER 3, 2021

” Internet of Things. Agriculture may not be the first industry you associate with cybersecurity problems, but we all need to aware of the risks created by connecting this ancient part of our food supply chain to the Internet. Install updates/patch operating systems, software, and firmware as soon as they are released.

Ransomware 139

Ransomware Manufacturing Passwords Internet 139

Security Affairs

SEPTEMBER 19, 2022

The analysis of various firmware allowed the researchers to discover the presence of the flawed module in NETGEAR devices (R9000, R7800, RAX200, RAX120, R6230, R6260, RAX40) and some Orbi WiFi Systems (RBR20, RBS20, RBR50, RBS50). . present in the majority of NETGEAR firmware images in our corpus.”

Firmware 101

Firmware Passwords Technology Hacking 101

Security Affairs

JULY 8, 2022

The Taiwanese vendor QNAP is warning of a new family of ransomware targeting its NAS devices using weak passwords. Threat actors are targeting devices exposed online with the SMB service enabled, they perform brute-force attacks against accounts using weak passwords. Go to Control Panel > System > Firmware Update.

Ransomware 95

Ransomware Encryption Passwords Internet 95

Security Affairs

AUGUST 10, 2021

The Taiwanese vendor was informed of ongoing eCh0raix ransomware attacks that infected QNAP NAS devices using weak passwords. ” Palo Alto researchers said that some 250,000 QNAP and Synology NAS devices are exposed to Internet, according to data from the Cortex Xpanse platform.

Ransomware 127

Ransomware Encryption Firmware Passwords 127

Security Affairs

DECEMBER 24, 2022

Unlike the D-Link analysis, the researchers has no physical access to the device and attempted to retrieve the password from the config. “The firmware is basically a merge of 3 sections, the LZMA section is the kernel, at 0x148CD6 the root-fs and at 0x90BD36 the www content.” A firmware fix has been released.

Firmware 52

Firmware Passwords Hacking Cybersecurity 52

Spinone

MARCH 17, 2018

The Internet of Things (IoT) is a term used to describe the network of interconnected electronic devices with “smart” technology. billion “things” connected to the Internet , a 30% increase from 2015. There are several reasons why the Internet of Things is such a threat to our digital security.

Internet 40

Internet Internet Risk Computers and Electronics 40

eSecurity Planet

MARCH 3, 2023

Most of us connect our mobile devices to a Wi-Fi router for internet access, but this connection can leave our network and data vulnerable to cyber threats. The protocol protects your incoming and outgoing internet traffic and makes it difficult for cyber criminals to intercept your data or hack your device.

Wireless 98

Wireless Encryption Passwords IoT 98

Security Affairs

AUGUST 13, 2023

Check with the device manufacturers for available patches and update the device firmware to version to 3.5.19.0 are disconnected from the internet and segmented, regardless of whether they run CODESYS. Make sure all critical devices, such as PLCs, routers, PCs, etc., Limit access to CODESYS devices to authorized components only.

Authentication 90

Authentication Firmware Hacking Passwords 90

Malwarebytes

MARCH 3, 2022

In the case of the Nvidia breach, LAPSUS$ claimed it was mainly after the removal of the lite hast rate (LHR) limitations in all GeForce 30 series firmware—apparently all to help out gamers and the mining community. The passwords and email addresses of some 70k employees were involved. Password managers save time. Hacked back?

Ransomware 90

Ransomware Password Management Passwords Hacking 90

Security Affairs

SEPTEMBER 8, 2020

“The authentication function contains undocumented code which provides the ability to authenticate as root without having to know the actual root password. An adversary with the private key can remotely reboot the device without having to know the root password. ” reads the advisory published by the expert.

Firmware 88

Firmware Wireless Authentication Advertising 88