Security Affairs

OCTOBER 20, 2018

CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. The company provides a firmware with a web interface that mainly uses PHP as a serverside language.

Firmware 65

Firmware IoT VPN Authentication 65

Adam Levin

FEBRUARY 10, 2020

If you use IoT devices, create a separate network on your router for them since they aren’t always the most secure connections to the outside world. And be judicious about any app you might download to your mobile device. Never buy a device that doesn’t allow you to set a long and strong password. Update Everything.

Passwords 245

Passwords Phishing Password Management Accountability 245

eSecurity Planet

AUGUST 22, 2023

Expanding attack surfaces require additional skills to secure, maintain, and monitor an ever-expanding environment of assets such as mobile, cloud, and the internet of things (IoT). assets (endpoints, servers, IoT, routers, etc.), and installed software (operating systems, applications, firmware, etc.).

Telecommunications 98

Telecommunications Firewall Penetration Testing Cybersecurity 98

eSecurity Planet

MARCH 22, 2023

Virtual Private Network (VPN) : For remote access, remote desktop protocol (RDP) no longer can be considered safe. Instead, organizations should use a virtual private network (VPN) solution. For improved security using mobile phones, free authentication apps are available from Google, Microsoft, and others.

Firewall 109

Firewall Network Security Penetration Testing Encryption 109

eSecurity Planet

MARCH 16, 2023

Widespread, complex business networks are particularly challenging to protect; these can include edge and mobile networks as well as branch office networks and SANs. This includes IoT devices. Sooner rather than later, you’ll want to perform an audit of your OT and IoT devices. Endpoint protection on all devices.

Network Security 109

Network Security Firewall Internet Internet 109

eSecurity Planet

MAY 2, 2024

60% of all mobile and browser zero-days are exploited by spyware vendors. However, also consider deploying specialized tools or tools with expanded capabilities, such as: Basic input output system (BIOS) security: Operates outside of the operating system to guard the firmware and other basic software connecting the operating system to a PC.

67

67

SecureList

NOVEMBER 14, 2022

Mobile devices exposed to wide attacks. Although 2022 did not feature any mobile intrusion story on the scale of the Pegasus scandal, a number of 0-days have still been exploited in the wild by threat actors. But first, let’s examine how they fared with the predictions for 2022. What we predicted in 2022.

Firmware 106

Firmware Surveillance Mobile Telecommunications 106