SecureWorld News

FEBRUARY 17, 2024

Wearable technologies continuously monitor vital signs such as heart rate, while larger equipment like dialysis machines and ventilators operate tirelessly to support critical bodily functions. New security solutions are now aiding healthcare organizations' IT teams in promptly resolving issues, even with devices from various manufacturers.

Healthcare 91

Healthcare Manufacturing Internet Internet 91

Security Affairs

JANUARY 9, 2023

Tens of software vulnerabilities affected Qualcomm firmware and impacted the devices of Microsoft, Lenovo, and Samsung. CVE-2022-33265 (CVSS Score 7.3) – the flaw is an Information exposure in Powerline Communication Firmware. Qualcomm January 2023 security bulletin addressed 22 software vulnerabilities in its Snapdragon suite.

Firmware 90

Firmware Manufacturing Software Hacking 90

Security Affairs

NOVEMBER 1, 2021

Positive Technologies researchers Vladimir Kononovich and Alexey Stennikov have discovered security flaws Wincor Cineo ATMs that could be exploited to bypass Black-Box attack protections and withdraw cash. Wincor is currently owned by ATM manufacturer giant Diebold Nixdorf. Both issues received a CVSSv3.0 score of 6.8.

Hacking 116

Hacking Firmware Encryption Manufacturing 116

Doctor Chaos

FEBRUARY 28, 2022

It has been found that very tiny imperfections are added to printed materials by manufacturers, which in turn may actually be identifiers that can be used to track down a specific printer. In recent years, some manufacturers have mentioned the existence of the tracking information in printer documentation while others have not.

Manufacturing 147

Manufacturing Firmware Technology 147

Security Affairs

OCTOBER 4, 2023

Please contact your device manufacturer for more information on the patch status about specific devices.” ” The three critical issues fixed by the chipmaker are: Public ID Security Rating CVSS Rating Technology Area Date Reported CVE-2023-24855 Critical Critical (CVSS Score 9.8) ” reads the advisory.

Firmware 102

Firmware Surveillance Authentication Manufacturing 102

Security Affairs

DECEMBER 14, 2022

After looking at 28 of the most popular manufacturers, our research team found 3.5 What is more, the overwhelming majority of internet-facing cameras are manufactured by Chinese companies. Most of the public-facing cameras we discovered are manufactured by the Chinese company Hikvision: the Cybernews research team found over 3.37

Surveillance 131

Surveillance Manufacturing Passwords Internet 131

The Last Watchdog

JUNE 27, 2023

Typical applications include green IIoT technologies like charging stations, smart meters, and PV inverters, for which only a small amount of memory is required to run boot software or to communicate with cloud applications. The proliferation of IIoT technologies is particularly evident in smart cities. Westford, Mass., 2 and 2.5”

IoT 139

IoT Manufacturing Media Technology 139

Malwarebytes

MAY 8, 2023

While the statement does not reveal a lot of tangible information, this snippet is important: “MSI urges users to obtain firmware/BIOS updates only from its official website, and not to use files from sources other than the official website.” Among them are household names like Lenovo and HP.

Firmware 89

Firmware Ransomware Backups Malware 89

SecureWorld News

JUNE 21, 2022

CISA and Forescout are warning of serious vulnerabilities discovered in OT (operational technology) systems from 10 global manufacturers, including Honeywell, Siemens, Motorola, and Ericsson. The most serious security flaws include remote code execution (RCE) and firmware vulnerabilities.

Manufacturing 70

Manufacturing Firmware Technology 70

Security Affairs

JULY 21, 2020

Researchers devised a technique dubbed BadPower to alter the firmware of fast chargers to cause damage to connected systems or cause the device to catch fire. BadPower consists of corrupting the firmware of fast chargers. “Most BadPower problems can be fixed by updating the device firmware.”

Firmware 111

Firmware Manufacturing Advertising Hacking 111

Malwarebytes

SEPTEMBER 22, 2021

In a detailed post on Github , security researcher Watchful_IP describes how he found that the majority of the recent camera product ranges of Hikvision cameras are susceptible to a critical, unauthenticated, remote code execution (RCE) vulnerability, even with the latest firmware. Hangzhou Hikvision Digital Technology Co.,

Firmware 131

Firmware Surveillance Marketing VPN 131

Krebs on Security

APRIL 26, 2019

A peer-to-peer (P2P) communications technology built into millions of security cameras and other consumer electronics includes several critical security flaws that expose the devices to eavesdropping, credential theft and remote compromise, new research has found.

IoT 258

IoT Firewall Manufacturing Computers and Electronics 258

Security Affairs

NOVEMBER 4, 2021

“CISA encourages manufacturers, vendors, and developers to review BRAKTOOTH: Causing Havoc on Bluetooth Link Manager and update vulnerable Bluetooth System-on-a-Chip (SoC) applications or apply appropriate workarounds.” ” reads CISA’s advisory.

Firmware 101

Firmware Manufacturing Technology Engineering 101

Security Affairs

AUGUST 4, 2021

IN FRA:HALT is a set of vulnerabilities affecting a popular TCP/IP library commonly OT devices manufactured by more than 200 vendors. NicheStack (aka InterNiche stack) is a proprietary TCP/IP stack developed originally by InterNiche Technologies and acquired by HCC Embedded in 2016. ” states the report.

DNS 118

DNS Manufacturing Firmware Technology 118

CyberSecurity Insiders

NOVEMBER 25, 2021

From backdoors- As the Korean giant creates, validates and manufactures its computing devices all on its own, its every piece of hardware, wiring and firmware is securely drafted at its high secure R&D plants & factories in the world.

Mobile 132

Mobile Firmware Manufacturing Passwords 132

The Last Watchdog

SEPTEMBER 5, 2023

I had an eye-opening conversation about all of this with Steve Hanna , distinguished engineer at Infineon Technologies , a global semiconductor manufacturer based in Neubiberg, Germany. Threat actors all-too-readily compromise, disrupt and maliciously manipulate the comparatively simple IoT systems we havein operation today.

IoT 180

IoT Government Internet Internet 180

SecureList

MARCH 20, 2024

In 2023 , our technologies blocked 33.8 Dwphon In November 2023, we stumbled upon an Android malware variant targeting mobile phones by various Chinese OEM manufacturers. The same malware earlier had been found in the firmware of a kids’ smart watch by an Israeli manufacturer distributed mainly in Europe and the Middle East.

Malware 85

Malware Mobile Firmware Spyware 85

Security Affairs

SEPTEMBER 2, 2021

“we disclose BrakTooth, a family of new security vulnerabilities in commercial BT stacks that range from denial of service (DoS) via firmware crashes and deadlocks in commodity hardware to arbitrary code execution (ACE) in certain IoTs.” ” reads the post published by the researchers. ” continue the researchers.

Firmware 92

Firmware Manufacturing IoT Technology 92

CyberSecurity Insiders

MARCH 16, 2021

The cars we drive today have become truly connected objects, capable of a variety of functionalities that both users and manufacturers could have only dreamed of in past decades. However, with increased connectivity in our cars, new challenges are arising for both manufacturers and users. Technologies that enable connectivity in cars.

Manufacturing 115

Manufacturing IoT Technology Cybersecurity 115

eSecurity Planet

FEBRUARY 2, 2024

While Teslas aren’t the typical business IoT device, their connection to the internet makes them a cyber threat as much as your business’s other IoT technology. And IoT devices often don’t have the firmware to install antivirus software or other protective tools.

Hacking 117

Hacking IoT Firmware Cybersecurity 117

Security Affairs

JUNE 22, 2020

AMD is going to release patches for a flaw affecting the System Management Mode (SMM) of the Unified Extensible Firmware Interface (UEFI). The vulnerability was discovered by the security researcher Danny Odler, it resides in the AMD’s Mini PC could allow attackers to manipulate secure firmware and execute arbitrary code.

Firmware 94

Firmware Architecture Advertising Manufacturing 94

Security Affairs

AUGUST 13, 2023

An attacker can trigger the flaw to gain remote code execution and conduct denial-of-service attacks under specific conditions, exposing operational technology (OT) environments to hacking. could put operational technology (OT) infrastructure at risk of attacks, such as remote code execution (RCE) and denial of service (DoS).”

Authentication 92

Authentication Firmware Hacking Passwords 92

Malwarebytes

AUGUST 24, 2021

Last time it was a vulnerability in the Arcadyan firmware found in devices distributed by some of today’s biggest router vendors and internet service providers, such as ASUS, Orange, Vodafone, Telstra, Verizon, Deutsche Telekom, and British Telecom. Exactly what Mirai wants. Vulnerabilities. Mitigation.

Firmware 96

Firmware IoT Internet Internet 96

Pen Test

OCTOBER 12, 2023

Countermeasures: To prevent drone signal hijacking, drone manufacturers and operators can implement encryption and authentication mechanisms for RF communication. Variety of Encryption Standards: Encryption standards used in RF technology can vary depending on the specific RF application.

Encryption 52

Encryption Firmware Surveillance Technology 52

Security Affairs

OCTOBER 26, 2021

The victims include the construction subsector of the critical manufacturing sector, the academia subsector of the government facilities sector, the information technology sector, and the transportation sector.” Install updates/patch operating systems, software, and firmware as soon as updates/patches are released.

Ransomware 130

Ransomware Firmware Antivirus Accountability 130

eSecurity Planet

NOVEMBER 1, 2021

The European Union is poised to place more demands on manufacturers to design greater security into their wireless and Internet of Things (IoT) devices. Manufacturers will be required to adhere to the new cybersecurity safeguards when designing and producing these products.

Wireless 94

Wireless IoT Manufacturing Mobile 94

CyberSecurity Insiders

DECEMBER 6, 2022

This analysis from Dirk Schrader, Vice President of Security Research, and Michael Paye, Vice President of Research and Development, is based on Netwrix’s global experience across a wide range of verticals, including technology, finance, manufacturing, government and healthcare. Understaffing will increase the role of channel partners.

Cybersecurity 116

Cybersecurity Cybercrime Social Engineering Risk 116

Malwarebytes

SEPTEMBER 3, 2021

But manufacturers of agricultural equipment have spent the last few years locked in an automation arms race, and the side effects of this race are starting to show. In any industry that is developing and adopting new technology at pace you can expect growing pains and security is often the last thing on the developers’ minds.

Ransomware 139

Ransomware Manufacturing Passwords Internet 139

Thales Cloud Protection & Licensing

FEBRUARY 16, 2021

Digital technology and connected IoT devices have proliferated across industries and into our daily lives. Driven by the need to secure themselves against increasing threats, organizations (both manufacturers and IoT consumers) realize that they need better built-in security. Critical Success Factors to Widespread Deployment of IoT.

IoT 96

IoT Manufacturing Energy and Utilities Data collection 96

Security Affairs

OCTOBER 10, 2018

Security experts from security firm SEC Consult have identified over 100 companies that buy and re-brand video surveillance equipment (surveillance cameras, digital video recorders (DVRs), and network video recorders (NVRs)) manufactured by the Chinese firm Hangzhou Xiongmai Technology Co., Xiongmai hereinafter) that are open to hack.

Surveillance 84

Surveillance Hacking Firmware Manufacturing 84

Security Affairs

AUGUST 13, 2022

The ransomware was involved in attacks aimed at technology and healthcare, defense contractors, educational institutions, manufacturers, companies across Europe, the United States, and Canada.

Ransomware 91

Ransomware Encryption Firmware Backups 91

Security Affairs

FEBRUARY 28, 2024

. “These operations have targeted various industries, including Aerospace & Defense, Education, Energy & Utilities, Governments, Hospitality, Manufacturing, Oil & Gas, Retail, Technology, and Transportation. Upgrade to the latest firmware version. Change any default usernames and passwords.

Energy and Utilities 99

Energy and Utilities Government Firewall Malware 99

Malwarebytes

APRIL 28, 2022

In September 2021 , the agency revealed that ransomware threat actors were ramping up attacks as the sector adopted more smart technologies. In the last decade, the agriculture sector has been through a rapid technological transformation as traditional farm machinery—such as tractors—have joined the Internet of Things (IoT).

Ransomware 86

Ransomware Technology Firmware Internet 86

SecureWorld News

APRIL 7, 2022

Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and the National Security Agency (NSA) released a security advisory identifying Cyclops Blink malware that targeted network devices manufactured by WatchGuard Technologies Inc. WatchGuard) and ASUSTek Computer Inc.

Malware 80

Malware Firmware Manufacturing Firewall 80

Security Affairs

SEPTEMBER 3, 2021

Small farms, large producers, processors and manufacturers, and markets and restaurants are particularly exposed to ransomware attacks. Install updates/patch operating systems, software, and firmware as soon as they are released. hard drive, storage device, the cloud).

Ransomware 100

Ransomware Passwords Backups Firmware 100

Security Affairs

APRIL 26, 2019

Security expert Paul Marrapese discovered two serious vulnerabilities in the iLnkP2P P2P system that ìs developed by Chinese firm Shenzhen Yunni Technology Company, Inc. Roughly 50% of vulnerable devices is manufactured by Chinese company Hichip. Potentially affected IoT devices include cameras and smart doorbells.

IoT 84

IoT Hacking Manufacturing Advertising 84

Security Affairs

SEPTEMBER 10, 2019

.” The IoT radio devices are manufactured by Imperial & Dabman (Series I and D) and are distributed in Germany by Telestar, but experts pointed out that it is possible to buy them via Ebay and Amazon by resellers. The devices have httpd web server , Web GUI, Wifi, or Bluetooth on board. ” continues the experts.

IoT 87

IoT Hacking Firmware Advertising 87