article thumbnail

Recent Tesla Hacks Highlight Importance of Protecting Connected Devices

eSecurity Planet

Within the last couple of months, smart device vulnerabilities have been piling up, prompting businesses to protect their Internet of Things (IoT) environments. While Teslas aren’t the typical business IoT device, their connection to the internet makes them a cyber threat as much as your business’s other IoT technology.

Hacking 121
article thumbnail

VulnRecap 1/16/24 – Major Firewall Issues Persist

eSecurity Planet

January 11, 2024 Smart Thermostat from Bosch Puts Offices in Danger Type of vulnerability: Malicious commands sent from an attacker to the thermostat, including potentially replacing firmware with rogue code. According to Bitdefender, the thermostat does not validate the authenticity of a new firmware update.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

VulnRecap 1/22/24 – Watch Chrome, Ivanti, Citrix Issues

eSecurity Planet

The problem: The Unified Extensible Firmware Interface (UEFI) specification has an open-source network implementation, EDK II, with nine discovered vulnerabilities. NDcPP Citrix also suggests that users don’t expose the Netscaler ADC management interface to the internet. and later releases NetScaler ADC and NetScaler Gateway  13.1-51.15

article thumbnail

Weekly Vulnerability Recap – November 6, 2023 – Windows Drivers and Exchange Flaws

eSecurity Planet

The problem: A security problem in Apache ActiveMQ lets attackers control systems remotely, making them highly vulnerable. Even though a security fix has been available since October 25, many internet-exposed servers are still at risk, and a number of security researchers have reported ransomware attacks exploiting the vulnerability.

article thumbnail

What is a Managed Security Service Provider? MSSPs Explained

eSecurity Planet

Expanding attack surfaces require additional skills to secure, maintain, and monitor an ever-expanding environment of assets such as mobile, cloud, and the internet of things (IoT). Poor integration of cybersecurity tools and IT infrastructure requires greater expertise to identify and close gaps in layers of security.

article thumbnail

Weekly Vulnerability Recap – Sept. 11, 2023 – Android Update Fixes 33 Vulnerabilities

eSecurity Planet

The fix: ASUS released firmware updates to address the vulnerabilities. It was also suggested to use a VPN for Superset instances that are connected to the internet. Attackers target certain administrative API functions on these devices using specially crafted input.

VPN 109
article thumbnail

Barracuda SecureEdge SASE Review 2023

eSecurity Planet

These one, three, and five year subscriptions provide enhanced support for the hardware, firmware maintenance, security updates, and optional participation in early-release firmware updates. SecureEdge Support For the appliances, the primary source of support will be the required Energize Updates subscriptions.