Bleeping Computer

MAY 10, 2023

What has firmware got to do with pop rock, you ask? That's the question that crossed a security researcher's mind as he analyzed Kingston's firmware and stumbled upon the lyrics of a popular Coldplay song buried deep within it. [.]

Firmware 96

Firmware Technology 96

Security Affairs

JULY 13, 2022

IT giant Lenovo released security fixes to address three vulnerabilities that impact the UEFI firmware shipped with over 70 product models. The three buffer overflow vulnerabilities in UEFI firmware, tracked as CVE-2022-1890, CVE-2022-1891, and CVE-2022-1892, were discovered by researchers from ESET. Pierluigi Paganini.

Firmware 132

Firmware Hacking Technology Information Security 132

Security Affairs

DECEMBER 30, 2021

iLOBleed, is a previously undetected rootkit that was spotted targeting the HP Enterprise’s Integrated Lights-Out ( iLO ) server management technology to tamper with the firmware modules and wipe data off the infected systems. This malware has been used by hackers for some time and we have been monitoring its performance.

Firmware 133

Firmware Malware System Administration Technology 133

Bleeping Computer

MAY 3, 2023

Orqa, a maker of First Person View (FPV) drone racing goggles, claims that a contractor introduced code into its devices' firmware that acted as a time bomb designed to brick them. [.]

Firmware 103

Firmware Technology 103

SecureList

JULY 25, 2022

One of the main draws towards malware nested in such low levels of the operating system is that it is extremely difficult to detect and, in the case of firmware rootkits, will ensure a computer remains in an infected state even if the operating system is reinstalled or the user replaces the machine’s hard drive entirely. Conclusions.

Firmware 144

Firmware DNS Malware Technology 144

Security Boulevard

NOVEMBER 7, 2022

Whether it’s the Executive Office, the average consumer, or the threat actors, all eyes are on the security of the technology supply chain. The post November Firmware Threat Report appeared first on Security Boulevard.

Threat Reports 52

Threat Reports Firmware Technology 52

The Last Watchdog

NOVEMBER 20, 2019

Related: Ransomware remains a scourge The former has been accused of placing hidden backdoors in the firmware of equipment distributed to smaller telecom companies all across the U.S. Firmware is on everything from hard drives, motherboards and routers to office printers and smart medical devices. The Chinese are all over this.

Firmware 174

Firmware Hacking Software Surveillance 174

The Hacker News

NOVEMBER 28, 2022

Over a dozen security flaws have been discovered in baseboard management controller (BMC) firmware from Lanner that could expose operational technology (OT) and internet of things (IoT) networks to remote attacks.

Firmware 94

Firmware IoT Internet Internet 94

Security Boulevard

AUGUST 3, 2022

Firmware security has undergone an incredible transformation over the past several years. What was once an often forgotten and overlooked part of the technology stack has become one of the most active battlegrounds between cybersecurity attackers and defenders. Firmware is where the stakes are highest.

Firmware 59

Firmware Technology Cybersecurity 59

Security Affairs

MARCH 9, 2022

Researchers disclosed 16 high-severity flaws in different implementations of Unified Extensible Firmware Interface (UEFI) firmware impacting multiple HP enterprise devices. This knowledge base is crucial for developing effective mitigations and defense technologies for device security.”, Pierluigi Paganini.

Firmware 72

Firmware Hacking Technology Cybersecurity 72

Bleeping Computer

MAY 19, 2022

Netgear is pushing out fixes for a bad Orbi firmware update released earlier this month that prevents users from accessing the device's admin console. [.].

Firmware 101

Firmware Technology 101

SC Magazine

JUNE 2, 2021

Microsoft acquired ReFirm Labs Wednesday in a bid to bolster its operational technology security offerings. Microsoft acquired ReFirm Labs Wednesday in a bid to bolster its operational technology security offerings. “Firmware is kind of the software that we politely ignore today,” he said.

Firmware 77

Firmware IoT Technology Media 77

Security Boulevard

JUNE 25, 2023

Paul also shares with us some of his greatest hacking stories and don’t miss our lively […] The post Security Podcasting, Hacking Stories, and The State of Firmware Security with Paul Asadoorian appeared first on Shared Security Podcast.

Firmware 52

Firmware Hacking Internet Internet 52

The Last Watchdog

JUNE 26, 2023

Singapore, June 26, 2023 – Hardware cybersecurity solutions pioneer Flexxon today announced the appointment of Erik Nilsen, PhD, as its Chief Technology Strategist. Flexxon’s flagship cybersecurity solution, the X-PHY® Cybersecure SSD, is the world’s first AI-embedded firmware-based cybersecurity solution.

Technology 100

Technology Marketing Firmware Media 100

Penetration Testing

MARCH 8, 2024

Smart locks promise convenience and a futuristic feel, but recent research exposes a dark side to this technology. Kontrol and Elock locks, both utilizing firmware from the company Sciener, have been found riddled with... The post Critical Vulnerabilities Found in Popular Smart Locks appeared first on Penetration Testing.

Penetration Testing 98

Penetration Testing Firmware Technology 98

Thales Cloud Protection & Licensing

APRIL 3, 2024

Security standards, like technology, are always evolving, making compliance challenging for customers and vendors alike. A change in technology that is. FIPS 140-3 is more closely aligned to international standards and better suited to today's technologies. Why did they change something like a compliance standard? And that’s it!

Firmware 134

Firmware Technology Backups Marketing 134

The Hacker News

DECEMBER 30, 2021

A previously unknown rootkit has been found setting its sights on Hewlett-Packard Enterprise's Integrated Lights-Out (iLO) server management technology to carry out in-the-wild attacks that tamper with the firmware modules and completely wipe data off the infected systems.

Firmware 137

Firmware Technology Malware Cybersecurity 137

Security Boulevard

MARCH 8, 2024

By Max Ammann and Emilio López Our application security team leaves no stone unturned; our audits dive deeply into areas ranging from device firmware, operating system kernels, and cloud systems to widely used technology such as mobile and web applications.

Firmware 64

Firmware Mobile Technology 64

Security Affairs

JANUARY 9, 2023

Tens of software vulnerabilities affected Qualcomm firmware and impacted the devices of Microsoft, Lenovo, and Samsung. CVE-2022-33265 (CVSS Score 7.3) – the flaw is an Information exposure in Powerline Communication Firmware. Qualcomm January 2023 security bulletin addressed 22 software vulnerabilities in its Snapdragon suite.

Firmware 84

Firmware Manufacturing Software Hacking 84

Malwarebytes

MAY 8, 2023

While the statement does not reveal a lot of tangible information, this snippet is important: “MSI urges users to obtain firmware/BIOS updates only from its official website, and not to use files from sources other than the official website.” Among them are household names like Lenovo and HP.

Firmware 93

Firmware Ransomware Backups Malware 93

Dark Reading

JULY 2, 2021

Microsoft maintains that exploitation of recent Dell vulnerabilities would be blocked on ultra-secure PCs - but most systems do not have the technology yet.

Firmware 106

Firmware Technology 106

The Hacker News

OCTOBER 5, 2021

Cybersecurity researchers on Tuesday revealed details of a previously undocumented UEFI (Unified Extensible Firmware Interface) bootkit that has been put to use by threat actors to backdoor Windows systems as early as 2012 by modifying a legitimate Windows Boot Manager binary to achieve persistence, once again demonstrating how technology meant to (..)

Firmware 131

Firmware Technology Cybersecurity 131

Dark Reading

APRIL 7, 2023

Vulnerabilities in the device firmware and drivers underscore how printers cannot be set-and-forget technology and need to be managed.

Firmware 104

Firmware Technology 104

Security Affairs

MARCH 7, 2020

A new vulnerability, tracked as CVE-2019-0090 , affects all Intel chips that could allow attackers to bypass every hardware-enabled security technology. Security experts from Positive Technologies warn of a new vulnerability, tracked as CVE-2019-0090, that affects all Intel processors that were released in the past 5 years.

Firmware 126

Firmware Technology Advertising Authentication 126

Malwarebytes

SEPTEMBER 22, 2021

In a detailed post on Github , security researcher Watchful_IP describes how he found that the majority of the recent camera product ranges of Hikvision cameras are susceptible to a critical, unauthenticated, remote code execution (RCE) vulnerability, even with the latest firmware. Hangzhou Hikvision Digital Technology Co.,

Firmware 137

Firmware Surveillance Marketing VPN 137

Security Affairs

NOVEMBER 1, 2021

Positive Technologies researchers Vladimir Kononovich and Alexey Stennikov have discovered security flaws Wincor Cineo ATMs that could be exploited to bypass Black-Box attack protections and withdraw cash. ” explained Vladimir Kononovich, Senior Specialist of ICS Security at Positive Technologies. Both issues received a CVSSv3.0

Hacking 114

Hacking Firmware Encryption Manufacturing 114

CSO Magazine

FEBRUARY 13, 2023

Threat groups who target operational technology (OT) networks have so far focused their efforts on defeating segmentation layers to reach field controllers such as programmable logic controllers (PLCs) and alter the programs (ladder logic) running on them.

Firmware 116

Firmware Architecture Technology Risk 116

Adam Levin

MARCH 19, 2020

Update the Firmware: Router manufacturers are constantly issuing updates and patches for newly discovered firmware vulnerabilities. If an employee hasn’t updated their router firmware since the day they bought it, chances are there are some security holes that need to be addressed.

Wireless 199

Wireless Firmware Firewall Manufacturing 199

Security Affairs

OCTOBER 4, 2023

.” The three critical issues fixed by the chipmaker are: Public ID Security Rating CVSS Rating Technology Area Date Reported CVE-2023-24855 Critical Critical (CVSS Score 9.8) WLAN Firmware Internal CVE-2023-24855 : Use of Out-of-range Pointer Offset in Modem. Modem Internal CVE-2023-28540 Critical Critical (CVSS Score 9.1)

Firmware 98

Firmware Surveillance Authentication Manufacturing 98

Security Affairs

OCTOBER 22, 2023

“If you’re working today at the cutting edge of technology then geopolitics is interested in you, even if you’re not interested in geopolitics.” ” Commercial businesses in the technology sector of any size, especially small companies and start-ups and researchers, are more exposed to Chinese espionage. .

Telecommunications 128

Telecommunications Technology Government Firmware 128

Security Affairs

DECEMBER 9, 2023

A set of flaws, collectively called 5Ghoul, in the firmware implementation of 5G mobile network modems from major vendors impacts Android and iOS devices. Such a family of vulnerabilities are present in the firmware implementation of 5G mobile network modems from major chipset vendors i.e., Qualcomm and MediaTek.”

Firmware 112

Firmware Mobile Software Hacking 112

Bleeping Computer

JANUARY 12, 2023

A Canadian system administrator discovered that an Android TV box purchased from Amazon was pre-loaded with persistent, sophisticated malware baked into its firmware. [.].

Malware 121

Malware System Administration Firmware Technology 121

CSO Magazine

OCTOBER 4, 2022

Dell Technologies has announced a raft of new cybersecurity resources to help customers simplify zero-trust adoption and improve their cyber resiliency. To read this article in full, please click here

Cybersecurity 79

Cybersecurity Firmware Architecture Technology 79

CSO Magazine

JUNE 22, 2022

A new research project has uncovered 56 vulnerabilities in operational technology (OT) devices from 10 different vendors, all of which stem from insecurely designed or implemented functionality rather than programming errors.

Firmware 113

Firmware Authentication Technology 113

The Last Watchdog

JUNE 27, 2023

Typical applications include green IIoT technologies like charging stations, smart meters, and PV inverters, for which only a small amount of memory is required to run boot software or to communicate with cloud applications. The proliferation of IIoT technologies is particularly evident in smart cities. Westford, Mass.,

IoT 184

IoT Manufacturing Media Technology 184

CyberSecurity Insiders

SEPTEMBER 10, 2021

Presenting their find at the IEEE International Conference on Distributed Computing Systems in 2018, a team of researchers refined their invention even further that led to the innovation of a firmware that blocks ransomware from encrypting data on a computer network. Still, not all is well in this invention, as it comes with an expense.

Ransomware 92

Ransomware Firmware Antivirus Encryption 92

Security Affairs

APRIL 2, 2024

Researchers from the firmware security firm Binarly released a free online scanner to detect the CVE-2024-3094 Backdoor Last week, Microsoft engineer Andres Freund discovered a backdoor issue in the latest versions of the “xz” tools and libraries. The vulnerability was tracked as CVE-2024-3094 and received a CVSS score of 10.

Firmware 117

Firmware Authentication Engineering Hacking 117