Firmware, Internet and Mobile - Cyber Security Informer

MyBook Users Urged to Unplug Devices from Internet

Krebs on Security

JUNE 25, 2021

Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affected device.

Internet

Internet Internet Backups Small Business

Mobile malware evolution 2020

SecureList

MARCH 1, 2021

In 2020, Kaspersky mobile products and technologies detected: 5,683,694 malicious installation packages, 156,710 new mobile banking Trojans, 20,708 new mobile ransomware Trojans. Pandemic theme in mobile threats. The mobile malware Trojan-Ransom.AndroidOS.Agent.aq The year in figures. Trends of the year.

Mobile

Mobile Malware Adware Banking

Malware found pre-installed in cheap push-button mobile phones sold in Russia

Security Affairs

SEPTEMBER 6, 2021

Security researcher ValdikSS found malware preinstalled in four low-budget push-button mobile phones available for sale on Russian e-stores. A Russian security researcher that goes online with the name of ValdikSS has found malware preinstalled in four low-budget push-button mobile phones available for sale on Russian e-stores.

Mobile

Mobile Malware Firmware Manufacturing

Webinars

Reimagining Cybersecurity Training: Driving Real Impact on Security Culture

MORE WEBINARS

Ransomware threat to SonicWall Customers

CyberSecurity Insiders

JULY 16, 2021

Therefore, customers using Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) products are being urged to disconnect those devices from internet as they are on the verge of getting cyber attacked and injected with file encrypting malware as its 8.x x firmware is going to reach its EOL aka End of Life.

Ransomware

Ransomware Firmware Cyber Attacks Firewall

Internet safety tips for kids and teens: A comprehensive guide for the modern parent

Malwarebytes

SEPTEMBER 21, 2021

Today’s generation of kids and teens consider their devices and the Internet as extensions of their lives. So without further ado, let’s dive into what we should be teaching our kids about Internet safety and what we can do to enforce these teachings. 7 Internet safety tips. Update your child’s device’s firmware.

Internet

Internet Internet Passwords Password Management

Ubiquiti: Change Your Password, Enable 2FA

Krebs on Security

JANUARY 11, 2021

Ubiquiti , a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. ” To manage your security settings on a Ubiquiti device, visit [link] and log in. .

Passwords

Passwords Authentication Firmware Accountability

D-Link issues beta hotfix for multiple flaws in DIR-3040 routers

Security Affairs

JULY 17, 2021

Network equipment vendor D-Link has released a firmware hotfix to fix multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router. Network equipment vendor D-Link has released a firmware hotfix to address multiple vulnerabilities affecting the DIR-3040 AC3000-based wireless internet router.

Firmware

Firmware Wireless Passwords Internet

Update now! NetGear routers’ default configuration allows remote attacks

Malwarebytes

DECEMBER 8, 2022

NetGear has made a hotfix available for its Nighthawk routers after researchers found a network misconfiguration in the firmware allowed unrestricted communication with the internet facing ports of the device listening through IPv6. No auto-update. The NetGear Nighthawk RAX 30 (image courtesy of NetGear).

Firmware

Firmware Small Business Internet Internet

InfectedSlurs botnet targets QNAP VioStor NVR vulnerability

Security Affairs

DECEMBER 17, 2023

that impacted several routers, including Future X Communications (FXC) AE1021 and AE1021PE wall routers, running firmware versions 2.0.9 “QNAP considers these devices discontinued for support; however, the vendor recommends upgrading VioStor firmware on existing devices to the latest available version. and earlier.

Firmware

Firmware Wireless DDOS IoT

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

JULY 25, 2023

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. SocksEscort[.]com com , is what’s known as a “SOCKS Proxy” service. WHO’S BEHIND SOCKSESCORT?

Malware

Malware VPN Internet Internet

Interview With a Crypto Scam Investment Spammer

Krebs on Security

MAY 22, 2023

Chaput said the spammers used more than 1,500 Internet addresses across 400 providers to register new accounts, which then followed popular accounts on Mastodon and sent private mentions to the followers of those accounts. has been associated with accounts at the mobile app site aptoide.com (user: CoolappsforAndroid) and vimeworld.ru

Scams

Scams DDOS Cryptocurrency Accountability

IoT Unravelled Part 3: Security

Troy Hunt

NOVEMBER 25, 2020

I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Back to the bit about risks impacting data collected by IoT devices and back again to CloudPets, Context Security's piece aligned with my own story about kids' CloudPets messages being left exposed to the internet.

IoT

IoT Firmware Risk Manufacturing

An educational robot security research

SecureList

FEBRUARY 27, 2024

” For instance, educational robots that connect to the internet and support video calls. ” Interactive features include gaming and educational applications for children, a voice assistant, internet access and connection to the parent app for smartphones.

Education

Education Manufacturing Firmware Internet

Beyond the Office: Securing Home Devices and Networks Against Corporate Breaches

SecureWorld News

OCTOBER 8, 2023

Avoid charging mobile devices through a computer; instead, use separate adapters. Turn off the internet connection if you will not be using it for an extended period. Use the administrator account only for maintenance, software installation, or firmware updates. Use the 3-2-1 backup rule. Opt for strong, hard-to-crack passwords.

Firmware

Firmware IoT Accountability Passwords

A daily average of 80,000 printers exposed online via IPP

Security Affairs

JUNE 23, 2020

The Shadowserver Foundation is a nonprofit security organization working altruistically behind the scenes to make the Internet more secure for everyone. The researchers scanned the Internet for printers that are exposing their Internet Printing Protocol (IPP) port online. and printers (or print servers).

Internet

Internet Internet Firmware Advertising

The High-Stakes Game of Ensuring IoMT Device Security

SecureWorld News

FEBRUARY 17, 2024

Being constantly connected to the internet, they are either protected by basic passwords or, in some cases, have no password protection at all. Challenges in securing IoMT devices The Internet of Medical Things (IoMT) is essentially a subset of the wider Internet of Things (IoT) concept.

Healthcare

Healthcare Manufacturing Internet Internet

Flaws in Medtronic MyCareLink can allow attackers to take over implanted cardiac devices

Security Affairs

DECEMBER 15, 2020

The CVE-2020-25183 is an improper authentication issue that could be exploited by an attacker to bypass the authentication between the MCL Smart Patient Reader and the Medtronic MyCareLink Smart mobile app. The flaw could be exploited by an attacker to remotely execute code taking over the device. ” states the advisory.

Firmware

Firmware Authentication Mobile IoT

MY TAKE: ‘Digital trust’ has a huge role to play mitigating cybersecurity threats, going forward

The Last Watchdog

MAY 23, 2022

Then the Internet took off and trusting the connection between a user’s device and a web server became of paramount importance. This results in ephemeral connections firing off at a vast scale — humans-to-software and software-to-software – all across the Internet Cloud. Related: Leveraging PKI to advance electronic signatures.

Digital transformation

Digital transformation Computers and Electronics Cybersecurity Encryption

Using iPhones and AirTags to sneak data out of air-gapped networks

Malwarebytes

MAY 13, 2021

A researcher has found out that it is possible to upload arbitrary data from non-internet-connected devices by sending Bluetooth Low Energy (BLE) broadcasts to nearby Apple devices that will happily upload the data for you. To demonstrate their point, they released an ESP32 firmware that turns the micro-controller into an (upload only) modem.

Internet

Internet Internet Firmware Mobile

SonicWall warns users of “imminent ransomware campaign”

Malwarebytes

JULY 15, 2021

The exploitation targets a known vulnerability that has been patched in newer versions of SonicWall firmware. x versions of the firmware. The notice mentions by type: Secure Mobile Access (SMA) 100 series Older Secure Remote Access (SRA) series. x firmware. x firmware versions. Devices at risk. 34 or 9.0.0.10

Ransomware

Ransomware Firmware VPN Firewall

SonicWall released patch for actively exploited SMA 100 zero-day

Security Affairs

FEBRUARY 4, 2021

SonicWall this week released firmware updates (version 10.2.0.5-29sv) 29sv) to address an actively exploited zero-day vulnerability in Secure Mobile Access (SMA) 100 series appliances. “SonicWall is announcing the availability of an SMA 100 series firmware 10.2.0.5-29sv ” reads the advisory published by the company.

Firmware

Firmware Mobile Media Internet

The Internet of Things: Security Risks Concerns

Spinone

MARCH 17, 2018

The Internet of Things (IoT) is a term used to describe the network of interconnected electronic devices with “smart” technology. billion “things” connected to the Internet , a 30% increase from 2015. There are several reasons why the Internet of Things is such a threat to our digital security.

Internet

Internet Internet Risk Computers and Electronics

EU to Force IoT, Wireless Device Makers to Improve Security

eSecurity Planet

NOVEMBER 1, 2021

The European Union is poised to place more demands on manufacturers to design greater security into their wireless and Internet of Things (IoT) devices. New vulnerabilities are created every day by cybercriminals, leading to many IoT devices being installed with out-of-date firmware and other exploitable vulnerabilities.”.

Wireless

Wireless IoT Manufacturing Mobile

P2P Weakness Exposes Millions of IoT Devices

Krebs on Security

APRIL 26, 2019

iLnkP2p is bundled with millions of Internet of Things (IoT) devices, including security cameras and Webcams, baby monitors, smart doorbells, and digital video recorders. Furthermore, even if software patches were issued, the likelihood of most users updating their device firmware is low.

IoT

IoT Firewall Manufacturing Computers and Electronics

Maze ransomware operators claim to have breached LG Electronics

Security Affairs

JUNE 25, 2020

trillion), LG comprises four business units: Home Entertainment, Mobile Communications, Home Appliances & Air Solutions, and Vehicle Components employing a total of 83,000 people. LG Electronics is part of the fourth-largest chaebol (large family-owned business conglomerate) in South Korea (LG Corporation). ” continues Cyble.

Computers and Electronics

Computers and Electronics Ransomware Mobile Telecommunications

Router security in 2021

SecureList

JUNE 8, 2022

A router is a gateway from the internet to a home or office — despite being conceived quite the opposite. According to cve.mitre.org , the number of vulnerabilities discovered in various routers, from mobile to industrial, has grown over the past decade. Keeping this gate locked so that no one can stroll right through is no easy task.

DDOS

DDOS Passwords IoT Firmware

[Full-Disclosure] HideezKey 2 FAIL: How a good idea turns into a SPF (Security Product Failure)

Security Affairs

MAY 7, 2021

This will help me later in the case I will be able to obtain a firmware that eventually is encrypted (i.e. Just to be 100% sure I won’t fry the board while attempting the firmware dump, I double-checked with the multimeter that the pinout of the SWD interface was still correct. known-plaintext attack). And indeed it was!

Firmware

Firmware Passwords Password Management Encryption

SonicWall warns users to patch critical vulnerability “as soon as possible”

Malwarebytes

SEPTEMBER 24, 2021

It sells a range of Internet appliances primarily directed at content control and network security, including devices providing services for network firewalls, unified threat management (UTM), virtual private networks (VPNs), and anti-spam for email. SonicWall is a company that specializes in securing networks. Mitigation.

Firmware

Firmware Internet Internet Firewall

Guest Blog: TalkingTrust. What’s driving the security of IoT?

Thales Cloud Protection & Licensing

MARCH 10, 2021

There are so many reasons why manufacturers connect their products to the Internet, whether it’s industrial machines, medical devices, consumer goods or even cars. The problem becomes – how do we make sure we’re securing these “driving data centers” against the risks and threats that lurk on the Internet? Device Security is Hard.

IoT

IoT Firmware Manufacturing Encryption

Hacking Wi-Fi networks by exploiting a flaw in Philips Smart Light Bulbs

Security Affairs

FEBRUARY 6, 2020

Lightbulbs could be remotely controlled through a mobile app or via a digital home assistant, owners could control the light in the environment and even calibrate the color of each lightbulb. The bridge discovers the hacker-controlled bulb with updated firmware, and the user adds it back onto their network. ZigBee is an IEEE 802.15.4-based

Hacking

Hacking IoT Wireless Firmware

Remotely Accessing Secure Kali Pi

Kali Linux

NOVEMBER 27, 2022

To enable wireless support, we need to find: The kernel Wi-Fi modules that need to be in the initramfs (Depends on hardware) The Wi-Fi firmware files that need to be in the initramfs (Depends on hardware) The Wireless interface name (Kali defaults to: wlan0 ) Additional packages to increase functionally. bin firmware: brcm/brcmfmac*-sdio.*.txt

Firmware

Firmware Wireless Passwords VPN

Use cases of secure IoT deployment

Thales Cloud Protection & Licensing

MAY 31, 2021

In our previous blog post , we discussed the challenges for securing IoT deployments, and how businesses and consumers benefit from authenticating and validating IoT software and firmware updates. Requirements also included that the firmware was to be signed by the manufacturer and verified by the pacemaker. Internet Of Things.

IoT

IoT Computers and Electronics Manufacturing Firmware

Attacks Escalating Against Linux-Based IoT Devices

eSecurity Planet

JANUARY 20, 2022

Incidents of malware targeting Linux-based Internet of Things (IoT) devices jumped by more than a third in 2021, with three malware families the primary drivers behind the increase. However, with more than 30 billion IoT devices expected to be connected to the internet by 2026, attacks against them can have wide-ranging impacts.

IoT

IoT DDOS Malware Internet

Experts warn of active exploitation of SonicWall zero-day in the wild

Security Affairs

FEBRUARY 1, 2021

On January, 29 SonicWall announced it is still investigating the presence of a zero-day vulnerability in the Secure Mobile Access (SMA) gateways. . We have also tested the shared PoC code and have so far concluded that it is not effective against firmware released after the 2015 patch.” ” reads SonicWall’s update.

Firmware

Firmware Media Mobile Internet

VulnRecap 1/22/24 – Watch Chrome, Ivanti, Citrix Issues

eSecurity Planet

JANUARY 22, 2024

Citrix and Ivanti are seeing more problems, too, as more vulnerabilities have cropped up in Netscaler and Endpoint Manager Mobile. The problem: The Unified Extensible Firmware Interface (UEFI) specification has an open-source network implementation, EDK II, with nine discovered vulnerabilities. and later releases of 13.1

Authentication

Authentication Malware VPN Mobile

Unfixed vulnerability in popular library puts IoT products at risk

Malwarebytes

MAY 4, 2022

Because uClibc is a relatively small C standard library intended for Linux kernel-based operating systems for embedded systems and mobile devices. In a typical home setup, there is: A modem provided by your Internet Service Provider (ISP) which is your connection to the outside world.

IoT

IoT DNS Risk Internet

Cybersecurity Agencies Reveal the Top Exploited Vulnerabilities of 2021

eSecurity Planet

APRIL 28, 2022

Malicious actors tend to focus on internet-facing systems to gain entry into a network, such as email and virtual private network (VPN) servers, using exploits targeting newly disclosed vulnerabilities. SonicWall Secure Mobile Access (SMA). Also read: Best Patch Management Software & Tools. Web-Facing Systems at Risk. “U.S.,

Cybersecurity

Cybersecurity Software Firmware Internet

MY TAKE: Why COVID-19 ‘digital distancing’ is every bit as vital as ‘social distancing’

The Last Watchdog

APRIL 28, 2020

For all individual computing device users, think twice before you open an email attachment, click to a link or download a new mobile app. Make sure you do everything possible to secure your mobile devices and that both the firmware and software are routinely updated. Do you really need to do it? Always remember. Never trust.

Social Engineering

Social Engineering Cyber Attacks Scams Engineering

Signed, Sealed, Delivered! Code Signing Makes Software Yours

Thales Cloud Protection & Licensing

NOVEMBER 7, 2018

That is not much different from what happens with software and firmware code signing today. Whether it is a software upgrade for a program, a mobile application, or firmware for a device, code is signed, sealed, and delivered, and you are left with the future in your hands! Why Is Code Signing Important?

Software

Software Firmware IoT Authentication

Security Affairs newsletter Round 309

Security Affairs

APRIL 11, 2021

prize pool Zerodium will pay $300K for WordPress RCE exploits Crooks abuse website contact forms to deliver IcedID malware Hackers compromised APKPure client to distribute infected Apps This man was planning to kill 70% of Internet in a bomb attack against AWS. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Cyber Attacks

Cyber Attacks Firmware Malware VPN

Tenable experts found 15 flaws in wireless presentation systems

Security Affairs

MAY 2, 2019

Wireless presentation systems are used to display content on a screen or through several devices, including mobile devices and laptops. Tenable started reporting the vulnerabilities to vendors in January, but at the time of the public disclosure, only Extron and Barco have released firmware updates.

Wireless

Wireless Firmware Advertising Authentication

Thousands of Xiaomi FURRYTAIL pet feeders exposed to hack

Security Affairs

OCTOBER 30, 2019

A Russian security researcher accidentally discovered API and firmware issues that allowed her to take over all Xiaomi FurryTail pet feeders. The Russian security researcher Anna Prosvetova, from Saint Petersburg, has accidentally discovered API and firmware issues that allowed her to take over all Xiaomi FurryTail pet feeders.

Hacking

Hacking Firmware Advertising DDOS

Spyware in the IoT – the Biggest Privacy Threat This Year

SiteLock

AUGUST 27, 2021

Simply defined, the internet of things (IoT) is a network of Internet-connected objects able to collect and exchange data. The Main Threats to Your Mobile and Domestic Tranquility. VPNs are the baseline cybersecurity tool to safeguard internet-enabled devices and a home network. Think again. Update, Update, Update.

IoT

IoT Spyware VPN Passwords

Sony Bravia Smart TVs affected by a critical vulnerability

Security Affairs

OCTOBER 6, 2018

The most severe vulnerability tracked as CVE-2018-16593 is a command-injection flaw that resides in the Sony application Photo Sharing Plus that allows users to share multimedia content from their mobile devices via Sony Smart TVs. Click the Firmware update link for details about how to check the software version.

Wireless

Wireless IoT Advertising Firmware

MyBook Users Urged to Unplug Devices from Internet

Mobile malware evolution 2020

Webinars

Trending Sources

Malware found pre-installed in cheap push-button mobile phones sold in Russia

Webinars

Ransomware threat to SonicWall Customers

Internet safety tips for kids and teens: A comprehensive guide for the modern parent

Ubiquiti: Change Your Password, Enable 2FA

D-Link issues beta hotfix for multiple flaws in DIR-3040 routers

Update now! NetGear routers’ default configuration allows remote attacks

InfectedSlurs botnet targets QNAP VioStor NVR vulnerability

Who and What is Behind the Malware Proxy Service SocksEscort?

Interview With a Crypto Scam Investment Spammer

IoT Unravelled Part 3: Security

An educational robot security research

Beyond the Office: Securing Home Devices and Networks Against Corporate Breaches

A daily average of 80,000 printers exposed online via IPP

The High-Stakes Game of Ensuring IoMT Device Security

Flaws in Medtronic MyCareLink can allow attackers to take over implanted cardiac devices

MY TAKE: ‘Digital trust’ has a huge role to play mitigating cybersecurity threats, going forward

Using iPhones and AirTags to sneak data out of air-gapped networks

SonicWall warns users of “imminent ransomware campaign”

SonicWall released patch for actively exploited SMA 100 zero-day

The Internet of Things: Security Risks Concerns

EU to Force IoT, Wireless Device Makers to Improve Security

P2P Weakness Exposes Millions of IoT Devices

Maze ransomware operators claim to have breached LG Electronics

Router security in 2021

[Full-Disclosure] HideezKey 2 FAIL: How a good idea turns into a SPF (Security Product Failure)

SonicWall warns users to patch critical vulnerability “as soon as possible”

Guest Blog: TalkingTrust. What’s driving the security of IoT?

Hacking Wi-Fi networks by exploiting a flaw in Philips Smart Light Bulbs

Remotely Accessing Secure Kali Pi

Use cases of secure IoT deployment

Attacks Escalating Against Linux-Based IoT Devices

Experts warn of active exploitation of SonicWall zero-day in the wild

VulnRecap 1/22/24 – Watch Chrome, Ivanti, Citrix Issues

Unfixed vulnerability in popular library puts IoT products at risk

Cybersecurity Agencies Reveal the Top Exploited Vulnerabilities of 2021

MY TAKE: Why COVID-19 ‘digital distancing’ is every bit as vital as ‘social distancing’

Signed, Sealed, Delivered! Code Signing Makes Software Yours

Security Affairs newsletter Round 309

Tenable experts found 15 flaws in wireless presentation systems

Thousands of Xiaomi FURRYTAIL pet feeders exposed to hack

Spyware in the IoT – the Biggest Privacy Threat This Year

Sony Bravia Smart TVs affected by a critical vulnerability

Stay Connected