Firmware, IoT and Presentation - Cyber Security Informer

IoT Unravelled Part 3: Security

Troy Hunt

NOVEMBER 25, 2020

In part 1 of this series, I posited that the IoT landscape is an absolute mess but Home Assistant (HA) does an admirable job of tying it all together. I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Now for the big challenge - security. Let's dive into it.

IoT

IoT Firmware Risk Encryption

Undocumented hidden feature found in Espressif ESP32 microchip

Security Affairs

MARCH 9, 2025

At the RootedCON , researchers at Tarlogic Innovation presented their findings on undocumented commands in the ESP32 microchip designed by the Chinese manufacturer Espressif. The experts warn that a hidden feature poses a security risk for millions of IoT devices. ” continues the researchers.

IoT

IoT Manufacturing Firmware Mobile

Using EM Waves to Detect Malware

Schneier on Security

JANUARY 14, 2022

.” Abstract : The Internet of Things (IoT) is constituted of devices that are exponentially growing in number and in complexity. They use numerous customized firmware and hardware, without taking into consideration security issues, which make them a target for cybercriminals, especially malware authors.

Malware

Malware IoT Firmware Internet

Guest Essay: The urgent need to improve firmware security — especially in OT and IoT routers

The Last Watchdog

AUGUST 26, 2024

As our world becomes increasingly interconnected, the security of Operational Technology (OT) and Internet of Things (IoT) devices is more critical than ever. Equally alarming was the widespread presence of known vulnerabilities, or “n-day” vulnerabilities, in the firmware images.

Firmware

Firmware IoT Manufacturing Cyber Risk

Hacking IoT & RF Devices with BürtleinaBoard

Security Affairs

JULY 28, 2020

How to hack IoT & RF Devices with BürtleinaBoard. Few months ago I have presented #FocacciaBoard : a similar multipurpose breakout board that uses the famous FT232H to handle multiple protocols commonly found in (I)IoT devices (i.e. his majesty, the Firmware). What do you do? Mutlimeter all-the-things.

IoT

IoT Hacking Firmware InfoSec

Attacks Escalating Against Linux-Based IoT Devices

eSecurity Planet

JANUARY 20, 2022

Incidents of malware targeting Linux-based Internet of Things (IoT) devices jumped by more than a third in 2021, with three malware families the primary drivers behind the increase. Threats to Open Source, IoT. Also read: Top IoT Security Solutions for 2022. IoT devices pose two fundamental threats,” he said.

IoT

IoT DDOS Malware Internet

Researchers used electromagnetic signals to classify malware infecting IoT devices

Security Affairs

JANUARY 5, 2022

Cybersecurity researchers demonstrate how to use electromagnetic field emanations from IoT devices to detect malware. The team of experts presented their technique at the Annual Computer Security Applications Conference ( ACSAC ) that took place in December. SecurityAffairs – hacking, IoT devices). Pierluigi Paganini.

IoT

IoT Malware Internet Internet

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Security Affairs

OCTOBER 13, 2020

The number of sensors and smart devices connected to the internet is exponentially rising, which are the 5 Major Vulnerabilities for IoT devices. If you take a look at the global market for IoT, you can easily spot the trend. IoT devices are exposed to cybersecurity vulnerabilities. IoT is a complicated concept.

IoT

IoT Cybersecurity Manufacturing Internet

Overview of IoT threats in 2023

SecureList

SEPTEMBER 21, 2023

IoT devices (routers, cameras, NAS boxes, and smart home components) multiply every year. The first-ever large-scale malware attacks on IoT devices were recorded back in 2008, and their number has only been growing ever since. Telnet, the overwhelmingly popular unencrypted IoT text protocol, is the main target of brute-forcing.

IoT

IoT DDOS Passwords Malware

Hacking the Twinkly IoT Christmas lights

Security Affairs

DECEMBER 24, 2018

Security researchers discovered some flaws in the Twinkly IoT lights that could be exploited display custom lighting effects and to remotely turn off them. If Twinkly lights are present in the network they will be instructed to display the message ‘Hack the Planet!’ Pierluigi Paganini.

IoT

IoT Hacking DNS Authentication

USENIX Security ’23 – UVSCAN: Detecting Third-Party Component Usage Violations in IoT Firmware

Security Boulevard

APRIL 26, 2024

Authors/Presenters: Binbin Zhao, Shouling Ji, Xuhong Zhang, Yuan Tian, Qinying Wang, Yuwen Pu, Chenyang Lyu, Raheem Beyah Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access.

Firmware

Firmware IoT Network Security

Hacking IoT devices with Focaccia-Board: A Multipurpose Breakout Board to hack hardware in a clean and easy way!

Security Affairs

FEBRUARY 18, 2020

Even before the appearance of the word (I)IoT, I was breaking hardware devices, as many of you, with a multitude of debuggers (i.e. Successfully dumped the smartlock’s firmware. And after having successfully dumped the firmware we can proceed at extracting some valuable evidences for the forensics case. Some Practical Use-Cases.

IoT

IoT Hacking Firmware InfoSec

Understanding IoT Security Challenges – An Interview with an Industry Expert

Thales Cloud Protection & Licensing

SEPTEMBER 12, 2018

The Internet of Things (IoT) is rapidly growing and expected to affect all industry verticals as well as our private lives. In this blog, we reached out to our technology partner Nexus to better understand the challenges that the industry faces to ensure safe deployment and management of IoT technologies. Weak authentication.

IoT

IoT Computers and Electronics Authentication Marketing

FDA Playbook Engineers Safety Into Medical Device Manufacturing

SecureWorld News

JUNE 25, 2025

Nathaniel Jones , Vice President of Threat Research at Darktrace : " As OT becomes more integrated with IT systems, it presents more opportunities for attackers. OT security is strongest when supported by robust IT security, requiring coordination between IT and OT teams to defend the entire network.

Manufacturing

Manufacturing Engineering Healthcare Risk

Use cases of secure IoT deployment

Thales Cloud Protection & Licensing

MAY 31, 2021

Use cases of secure IoT deployment. In our previous blog post , we discussed the challenges for securing IoT deployments, and how businesses and consumers benefit from authenticating and validating IoT software and firmware updates. Tue, 06/01/2021 - 06:55. Use case 1: Fortune 500 Healthcare Company.

IoT

IoT Computers and Electronics Manufacturing Firmware

NAME:WRECK, a potential IoT trainwreck

Malwarebytes

APRIL 13, 2021

Although never visible to end-users, TCP/IP stacks are libraries that vendors add to their firmware to support internet connectivity and other networking functions like DNS queries for their devices. For those interested in the full technical details the full report is available here and will be presented at Black Hat Asia 2021.

IoT

IoT DNS Internet Internet

Realtek-based routers, smart devices are being gobbled up by a voracious botnet

Malwarebytes

AUGUST 24, 2021

Mirai hoovers up vulnerable Internet of Things (IoT) devices and adds them to its network of zombie devices, which can then be used to launch huge Distributed Denial of Service (DDoS) attacks. Realtek chipsets are found in many embedded IoT devices. At least 65 vendors are affected. Exactly what Mirai wants. Vulnerabilities.

Firmware

Firmware IoT DDOS Internet

Vo1d malware infected 1.3 Million Android-based TV Boxes in 197 countries

Security Affairs

SEPTEMBER 13, 2024

file is a script that is present on most Android devices. “If any malware has root access and the ability to write to the /system system directory, it can anchor itself in the infected device by adding itself to this script (or by creating it from scratch if it is not present in the system). . “The install-recovery.sh

Malware

Malware Firmware Antivirus Manufacturing

Recent Tesla Hacks Highlight Importance of Protecting Connected Devices

eSecurity Planet

FEBRUARY 2, 2024

Within the last couple of months, smart device vulnerabilities have been piling up, prompting businesses to protect their Internet of Things (IoT) environments. While Teslas aren’t the typical business IoT device, their connection to the internet makes them a cyber threat as much as your business’s other IoT technology.

Hacking

Hacking IoT Firmware Penetration Testing

News alert: Sternum and ChargePoint collaborate to enhance ChargePoint Home Flex Security

The Last Watchdog

JANUARY 22, 2024

23, 2024 — Sternum, the pioneer in embedded IoT security and observability, today announced enhanced security for the ChargePoint Home Flex. ChargePoint, with its last firmware update, has disabled the HTTP server and updated the NTP client to address the issues. Tel Aviv, Israel – Jan.

IoT

IoT InfoSec Firmware Manufacturing

Device manufacturers need to rethink how to lock down IoT

SC Magazine

MAY 27, 2021

Today’s columnist, Matt Wyckhouse of Finite State, says to lock down IoT devices, manufacturers have to build security in from the start. billion IoT devices expected to hit the market globally by 2025. A recent Microsoft Security Signals survey found that just 29% of companies have any budget allocated to protect firmware at all.

Manufacturing

Manufacturing IoT Firmware Software

Firmware Fuzzing 101

ForAllSecure

DECEMBER 16, 2020

Whether it be routers, IoT devices or SCADA systems, they are very varied in architecture, use case, and purpose. Netgear N300 MIPS firmware image. What's Special about Firmware? Fuzzing firmware presents a specific set of challenges that are not often present together in other targets. Introduction.

Firmware

Firmware Architecture Engineering Authentication

Firmware Fuzzing 101

ForAllSecure

DECEMBER 15, 2020

Whether it be routers, IoT devices or SCADA systems, they are very varied in architecture, use case, and purpose. Netgear N300 MIPS firmware image. What's Special about Firmware? Fuzzing firmware presents a specific set of challenges that are not often present together in other targets. Extracting Firmware.

Firmware

Firmware Architecture Engineering Authentication

To Make the Internet of Things Safe, Start with Manufacturing

Thales Cloud Protection & Licensing

SEPTEMBER 11, 2018

This aptly describes the Internet of Things (IoT), where many small things are coming together to shape what we all hope will deliver a great leap in the way we live and do business. According to Maciej Kranz, Cisco VP for strategic innovation, writing for IoTechExpo.com , “[In 2018] IoT security will become the No.

Manufacturing

Manufacturing Internet Internet IoT

Router security in 2021

SecureList

JUNE 8, 2022

The nvd.nist.gov website presents different figures, but they too show a significant increase in the number of router vulnerabilities found in 2020 and 2021. To find out why cybercriminals attack routers, it is first worth looking at the Top 10 malware detected by our IoT traps in 2021. Make sure to update the firmware.

DDOS

DDOS IoT Passwords Firmware

Using EM Waves to Detect Malware

Security Boulevard

JANUARY 14, 2022

Abstract : The Internet of Things (IoT) is constituted of devices that are exponentially growing in number and in complexity. They use numerous customized firmware and hardware, without taking into consideration security issues, which make them a target for cybercriminals, especially malware authors.

Malware

Malware IoT Firmware Internet

Tens of flaws in Samsung SmartThings Hub expose smart home to attack

Security Affairs

JULY 29, 2018

“Cisco Talos recently discovered several vulnerabilities present within the firmware of the Samsung SmartThings Hub.” The access to those IoT devices could allow attackers to gather sensitive information managed by the devices within the home and perform unauthorized activities. ” researchers said.

Firmware

Firmware IoT Advertising Wireless

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

JULY 25, 2023

Some possible avenues of infection include exploiting weak or default administrative credentials on routers, and outdated, insecure firmware that has known, exploitable security vulnerabilities. That same Google Analytics code is also now present on the homepages of wiremo[.]co WHO’S BEHIND SOCKSESCORT? com, such as abuseipdb[.]com

Malware

Malware VPN Internet Internet

Threat Model Thursday: ARM's Network Camera TMSA

Adam Shostack

JANUARY 2, 2025

Why "With the inherent diversity of IoT there will be a greater need for device manufacturers to have a reference TMSA for their product. Arm has created a series of reference English language Protection Profiles for IoT products to show how this might be done in a way that is understandable by non-security experts.

IoT

IoT Manufacturing Authentication Passwords

PoC exploit code for critical Realtek RCE flaw released online

Security Affairs

AUGUST 18, 2022

. “This repository contains the materials for the talk “Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.”, ”, which was presented at DEFCON30.” ” reads the description provided with the exploit code on GitHub.

Firmware

Firmware IoT Hacking Authentication

BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks

Security Affairs

NOVEMBER 1, 2018

Security experts from the IoT security firm Armis, the same that found the BlueBorne Bluetooth flaws, have discovered two serious vulnerabilities in BLE chips designed by Texas Instruments. “The security vulnerability for CVE-2018-16986 is present in these TI chips when scanning is used (e.g. ” continues the post.

Firmware

Firmware IoT Manufacturing Advertising

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT

IoT Hacking Internet Internet

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT

IoT Hacking Internet Internet

Over 600,000 SOHO routers were destroyed by Chalubo malware in 72 hours

Security Affairs

MAY 31, 2024

Chalubo (ChaCha-Lua-bot) is a Linux malware that was first spotted in late August 2018 by Sophos Labs while targeting IoT devices. The experts believe with high confidence that the malicious firmware update was a deliberate act intended to cause an outage. Threat actors aimed at creating a botnet used to launch DDoS attacks.

Malware

Malware Internet Internet Firmware

NGINX zero-day vulnerability: Check if you’re affected

Malwarebytes

APRIL 13, 2022

To mitigate against this, ensure that the backend daemon that presents the login form strips any special characters from the username field. In particular, it must remove the opening and closing parenthesis characters ( ) and the equal sign = , which all have special meaning for LDAP servers. And we have rounded up some additional advice.

Authentication

Authentication IoT Firmware Password Management

The State of Endpoint Security Management in 2022: It’s Worse Than You Suspect

CyberSecurity Insiders

NOVEMBER 1, 2022

These can be mobile phones, workstations, desktop and laptop computers, tablet computers, smartphones, IoT devices, wearable smart devices, as well as virtual environments, among many others. Based on numbers from Statista , there will be over 40 billion connected devices by 2030, and most of these are IoT products.

IoT

IoT Antivirus Threat Detection Cyber threats

The High-Stakes Game of Ensuring IoMT Device Security

SecureWorld News

FEBRUARY 17, 2024

Challenges in securing IoMT devices The Internet of Medical Things (IoMT) is essentially a subset of the wider Internet of Things (IoT) concept. Whereas IoT encompasses a variety of devices such as wearables, industrial sensors, and smartphones, IoMT is dedicated exclusively to medical devices.

Healthcare

Healthcare Manufacturing IoT Internet

Piping botnet: Researchers warns of possible cyberattacks against urban water services

Security Affairs

AUGUST 16, 2018

Ben Nassi, a researcher at Cyber@BGU, will be presenting “Attacking Smart Irrigation Systems” in Las Vegas at the prestigious Def Con 26 Conference in the IoT Village on August 11. A botnet is a large network of computers or devices controlled by a command and control server without the owner’s knowledge.

IoT

IoT Advertising Firmware Technology

Advanced threat predictions for 2023

SecureList

NOVEMBER 14, 2022

Doubling down on developer-specific threats, IBM presented noteworthy research at this year’s edition of BlackHat, evidencing how source code management or continuous integration systems could be leveraged by attackers. The first one, in January, was MoonBounce ; the other was CosmicStrand in July 2022.

Firmware

Firmware Surveillance Mobile Telecommunications

Wireless Security: WEP, WPA, WPA2 and WPA3 Explained

eSecurity Planet

MARCH 1, 2023

WPA3 is the newest protocol and offers better security features such as stronger encryption, protection against dictionary attacks, and easier setting of IoT devices, but has yet to become widely used. Update your router firmware from your router’s manufacturer and install them to ensure your router is up to date and secure.

Wireless

Wireless Encryption Authentication IoT

Episode 157: Do we need an FDA for Software? Also: operationalizing Threat Intelligence

The Security Ledger

AUGUST 16, 2019

Sarah Zatko of the Cyber Independent Testing Lab joins us to talk about CITL's big new study of firmware security. » Related Stories Spotlight Podcast: Unpacking Black Hat Hacks with Digicert CTO Dan Timpson Episode 156: Looming over Black Hat: doing Security at Massive Scale Huge Survey of Firmware Finds No Security Gains in 15 Years.

Firmware

Firmware Software Internet Internet

IoT Unravelled Part 2: IP Addresses, Network, Zigbee, Custom Firmware and Soldering

Troy Hunt

NOVEMBER 23, 2020

So, peeling back that next layer, the whole IoT space isn't just about devices that get their own IP address on your network and talk over TCP (or UDP). Let's drill into all that and then go deeper into custom firmware and soldering too. IoT and IP Addresses So, what happens when you start filling your home with IoT things?

Firmware

Firmware IoT Wireless Manufacturing

Secure Your Distributed Medical Devices with Robust Machine Identity Management

Security Boulevard

JULY 11, 2022

Another report from Kaspersky Labs found 33 vulnerabilities in the most widely used data transfer protocol for internet of things (IoT) medical devices, known as MQTT. MQTT is a common solution in most IoT gadgets, including medical devices. Secure Firmware Updates Are a Necessity for Resilient IoT Deployments.

Healthcare

Healthcare IoT Authentication Ransomware

Proroute H685 4G router vulnerabilities

Pen Test Partners

SEPTEMBER 18, 2024

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Product: H685t-w Vulnerable Firmware Version: 3.2.334 Links: CVE-2024-45682 icsa-24-261-02 Proroute changelogs Description Two authenticated command injection vulnerabilities have been identified in the H685t-w-P2 Compact 4G router running firmware version 3.2.334. High) CVSS: 3.1/ Medium) CVSS:3.1/

Firmware

Firmware VPN Mobile Passwords

IoT Unravelled Part 3: Security

Undocumented hidden feature found in Espressif ESP32 microchip

Trending Sources

Using EM Waves to Detect Malware

Guest Essay: The urgent need to improve firmware security — especially in OT and IoT routers

Hacking IoT & RF Devices with BürtleinaBoard

Attacks Escalating Against Linux-Based IoT Devices

Researchers used electromagnetic signals to classify malware infecting IoT devices

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Overview of IoT threats in 2023

Hacking the Twinkly IoT Christmas lights

USENIX Security ’23 – UVSCAN: Detecting Third-Party Component Usage Violations in IoT Firmware

Hacking IoT devices with Focaccia-Board: A Multipurpose Breakout Board to hack hardware in a clean and easy way!

Understanding IoT Security Challenges – An Interview with an Industry Expert

FDA Playbook Engineers Safety Into Medical Device Manufacturing

Use cases of secure IoT deployment

NAME:WRECK, a potential IoT trainwreck

Realtek-based routers, smart devices are being gobbled up by a voracious botnet

Vo1d malware infected 1.3 Million Android-based TV Boxes in 197 countries

Recent Tesla Hacks Highlight Importance of Protecting Connected Devices

News alert: Sternum and ChargePoint collaborate to enhance ChargePoint Home Flex Security

Device manufacturers need to rethink how to lock down IoT

Firmware Fuzzing 101

Firmware Fuzzing 101

To Make the Internet of Things Safe, Start with Manufacturing

Router security in 2021

Using EM Waves to Detect Malware

Tens of flaws in Samsung SmartThings Hub expose smart home to attack

Who and What is Behind the Malware Proxy Service SocksEscort?

Threat Model Thursday: ARM's Network Camera TMSA

PoC exploit code for critical Realtek RCE flaw released online

BLEEDINGBIT Bluetooth flaws in TI chips expose enterprises to remote attacks

The Hacker Mind: Hacking IoT

The Hacker Mind: Hacking IoT

Over 600,000 SOHO routers were destroyed by Chalubo malware in 72 hours

NGINX zero-day vulnerability: Check if you’re affected

The State of Endpoint Security Management in 2022: It’s Worse Than You Suspect

The High-Stakes Game of Ensuring IoMT Device Security

Piping botnet: Researchers warns of possible cyberattacks against urban water services

Advanced threat predictions for 2023

Wireless Security: WEP, WPA, WPA2 and WPA3 Explained

Episode 157: Do we need an FDA for Software? Also: operationalizing Threat Intelligence

IoT Unravelled Part 2: IP Addresses, Network, Zigbee, Custom Firmware and Soldering

Secure Your Distributed Medical Devices with Robust Machine Identity Management

Proroute H685 4G router vulnerabilities

Stay Connected