Security Affairs

NOVEMBER 17, 2019

The researchers focused their analysis on the firmware integrity verification process implemented in the Siemens SIMATIC S7-1200 PLC. The teams of researchers discovered that the hardware undocumented access mode was present in the bootloader code since 2013.

Firmware 111

Firmware Advertising Manufacturing Risk 111

Malwarebytes

JULY 15, 2021

The exploitation targets a known vulnerability that has been patched in newer versions of SonicWall firmware. x versions of the firmware. x firmware. x firmware versions. SSL-VPN 200/2000/400 (EOL 2013/2014) disconnect immediately and reset passwords. SMA 210/410/500v (Actively Supported) update firmware to 9.0.0.10-28sv

Ransomware 100

Ransomware Firmware VPN Passwords 100

Security Affairs

JULY 16, 2018

Anubhav explained that the passwords are related to Dahua DVRs running very old firmware that is known to be affected by a five-year-old vulnerability tracked as CVE-2013-6117. Even if the vulnerability has been patched, many Dahua devices are still running ancient firmware.

IoT 75

IoT Engineering Passwords Firmware 75

Security Affairs

MAY 14, 2019

. “ A vulnerability in the logic that handles access control to one of the hardware components in Cisco’s proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component.” ” reads the advisory published by Cisco.

Firmware 111

Firmware Authentication Software Advertising 111

Security Affairs

NOVEMBER 30, 2021

The issues date back to 2013 and HP fixed them ([ 1 ], [ 2 ]) in November. In the modern firmware versions, printing from USB is disabled by default. Cybersecurity researchers from F-Secure have discovered two critical vulnerabilities, collectively tracked as Printing Shellz , that impact approximately 150 multifunction printer models.

Social Engineering 124

Social Engineering Firmware Engineering Hacking 124

Security Affairs

MARCH 7, 2019

In early 2013, researchers at Rapid7 published an interesting whitepaper entitled “Security Flaws in Universal Plug and Play” that evaluated the global exposure of UPnP-enabled network devices. CVE-2013-0229 , a vulnerability found MiniUPnPd before 1.4, allows attackers to execute arbitrary code. • Pierluigi Paganini.

Cyber Attacks 107

Cyber Attacks Advertising Firmware Data collection 107

Security Boulevard

JANUARY 4, 2025

Vulnerabilities and Malware Primarily includes severe and exploited vulnerabilities in devices or software used by end users (ex: a major router firmware flaw). For EOL devices, depending on model and/or submodel, users may be able to flash firmware (such as OpenWRT) to extend the life of the device.

Data breaches 52

Data breaches Firmware Healthcare Malware 52

Security Affairs

JANUARY 8, 2022

x firmware in MySonicWall downloads section for TZ, NSA and SOHO platforms. FIP-FS is the anti-malware scanning engine used by Microsoft to protect its users, it was used starting with Exchange Server 2013. x should upgrade to the latest Junk Store 7.6.9. Junk Store 7.6.9 installer is posted under SonicOS 6.5.x

Firewall 105

Firewall Engineering Firmware Malware 105

Pen Test Partners

MARCH 30, 2025

Mitigations include using complex passwords, isolating IPMI on restricted networks, and regularly updating firmware despite infrequent patches. A large portion of these vulnerabilities are through buffer overflow which has been a trend all the way from 2013 to 2017. What is IPMI and how is it used?

Passwords 72

Passwords Firmware Authentication Media 72

Security Affairs

DECEMBER 11, 2018

A-Link WL54AP3 / WL54AP2 (CVE-2008-6823) D-Link DSL-2740R D-Link DIR 905L Medialink MWN-WAPR300 (CVE-2015-5996) Motorola SBG6580 Realtron Roteador GWR-120 Secutech RiS-11/RiS-22/RiS-33 (CVE-2018-10080) TP-Link TL-WR340G / TL-WR340GD TP-Link WR1043ND V1 (CVE-2013-2645). The latter attack hit websites worldwide.

DNS 111

DNS Advertising Firmware Banking 111

Security Affairs

MAY 12, 2021

Older CVEs are more likely to have been mediated, and newer ones are less so since developers might not yet patch them and, even more frequently, the firmware might not be updated by users. Aastra Technologies was acquired by Mitel Networks Corporation, a Canadian company, at the end of 2013. Most devices.

Manufacturing 112

Manufacturing Internet Internet Firmware 112

Malwarebytes

OCTOBER 5, 2021

United Extensible Firmware Interface (UEFI). UEFI is a specification for the firmware that controls the first stages of booting up a computer, before the operating system is loaded. (It’s It’s been a feature of the Xbox One gaming console since 2013, but doesn’t exit in PCs… yet.

Firmware 127

Firmware Technology Software Social Engineering 127

CyberSecurity Insiders

NOVEMBER 11, 2021

Ax with firmware 1.04b12 and earlier. NETGEAR DGN2200 devices with firmware through 10.0.0.50. CVE-2013-3307. CVE-2013-5223. Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.2, Affected products include: NAS326 before firmware V5.21(AAZF.7)C0 7)C0 NAS520 before firmware V5.21(AASZ.3)C0

Malware 85

Malware IoT Firmware Authentication 85

The Last Watchdog

AUGUST 26, 2019

In 2013, he co-founded Nozomi Networks aiming to deliver a more holistic and efficient way to defend industrial controls of all types. And not just of power plants and utilities, but also in the firmware and software that run manufacturing plants of all types and sizes, Carcano told me.

Hacking 157

Hacking Artificial Intelligence Technology Malware 157

The Last Watchdog

AUGUST 14, 2019

Here are my big takeaways: Prevention vs. detection In 2013, Gartner analyst Anton Chuvakin coined “EDR” to classify an emerging set of tools designed to go beyond signature-based antivirus software which was designed primarily to identify specific malicious binary files. For a full drill down, give a listen to the accompanying podcast.

Antivirus 147

Antivirus Digital transformation Firmware Software 147

The Last Watchdog

AUGUST 26, 2019

In 2013, he co-founded Nozomi Networks aiming to deliver a more holistic and efficient way to defend industrial controls of all types. And not just of power plants and utilities, but also in the firmware and software that run manufacturing plants of all types and sizes, Carcano told me.

Hacking 147

Hacking Artificial Intelligence Technology Malware 147

Security Affairs

DECEMBER 1, 2018

In early 2013, researchers at Rapid7 published an interesting whitepaper entitled “Security Flaws in Universal Plug and Play” that evaluated the global exposure of UPnP-enabled network devices. Experts recommend users to install routers update and patched firmware to mitigate the threat.

Hacking 111

Hacking Internet Internet Advertising 111

Security Affairs

JANUARY 31, 2022

In early 2013, researchers at Rapid7 published an interesting whitepaper entitled “Security Flaws in Universal Plug and Play” that evaluated the global exposure of UPnP-enabled network devices. Experts recommend users installing routers update and patched firmware to mitigate the threat.

Internet 98

Internet Internet Firmware Hacking 98

SecureList

APRIL 27, 2022

In December we were made aware of a UEFI firmware-level compromise through logs from our firmware scanning technology. Further analysis showed that the attackers modified a single component within the firmware to append a payload to one of its sections and incorporate inline hooks within particular functions.

Malware 145

Malware Firmware Government Phishing 145

Pen Test Partners

SEPTEMBER 9, 2024

Ring started in 2013, offering video doorbells that let you see and talk to visitors from your phone. SimpliSafe downplayed the risk and did not address the issue with a simple firmware update, suggesting that a full device replacement might be needed. SimpliSafe quickly fixed this with a firmware update. Who is Ring?

Firmware 64

Firmware Encryption Passwords Authentication 64

Malwarebytes

FEBRUARY 1, 2023

When American store Target found a Trojan designed to steal card details on its POS (point-of-sale) systems in 2013, no one expected that the route into its secure environment was its heating, ventilation, and air conditioning (HVAC) supplier, Fazio Mechanical Services.

Software 91

Software Risk Backups Technology 91

Kali Linux

DECEMBER 4, 2023

It is responsible for redirecting every request to its nearest mirror, based on a few factors such as geographic location, mirror speed, and mirror “freshness” Since Kali was launched back in March 2013, until November 2023 we had been using MirrorBrain.

Architecture 145

Architecture Passwords Firmware Software 145

SecureList

DECEMBER 14, 2022

For instance, in late 2013 and January 2014, we observed higher-than-normal activity in Ukraine by the Turla APT group, as well as a spike in the number of BlackEnergy APT sightings. It directly affected satellite modems firmwares , but was still to be understood as of mid-March.

DDOS 145

DDOS Ransomware Government Energy and Utilities 145

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. So that could be one of the things that affects that we're seeing a lot of firmware that is being reused across different devices, or are the same libraries like all over these across different projects.

IoT 52

IoT Hacking Internet Internet 52

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. So that could be one of the things that affects that we're seeing a lot of firmware that is being reused across different devices, or are the same libraries like all over these across different projects.

IoT 52

IoT Hacking Internet Internet 52

NopSec

DECEMBER 7, 2016

Between 2013 and 2014, a Russia-backed group alternatively known as Dragonfly and Energetic Bear launched targeted attacks against energy sector companies by targeting suppliers and service providers used by these companies. Perhaps most troubling, attackers occasionally target the device firmware of industrial control systems.

Cyber threats 40

Cyber threats Ransomware Cyber Attacks Government 40

Kali Linux

MAY 31, 2021

Refreshed Bleeding-Edge Branch Kali’s Bleeding-Edge branch has been around since March 2013 , but we have recently completely restructured the backend. This is due to bluez , bluez-firmware , and pi-bluetooth packages forked and patched Raspberry Pi kernel updated to 5.4.83

Engineering 52

Engineering Firmware Architecture Backups 52

SecureList

OCTOBER 23, 2024

We closely monitor their activities and quite often see them using their signature malware in their attacks — a full-feature backdoor called Manuscrypt. By the time we analyzed the attack, the attackers had already removed the exploit from the decoy website, preventing us from easily obtaining the next stage of the attack.

Engineering 145

Engineering Social Engineering Accountability Cryptocurrency 145

ForAllSecure

FEBRUARY 10, 2021

” So should analyzing a device’s firmware for security flaws be considered illegal? It's, it was became law in 2013, Massachusetts legislature modified it a little bit before they actually put it onto the books. As Stuart Brand said back in 1984 “information wants to be free.”

InfoSec 52

InfoSec Manufacturing Technology Software 52

ForAllSecure

FEBRUARY 10, 2021

” So should analyzing a device’s firmware for security flaws be considered illegal? It's, it was became law in 2013, Massachusetts legislature modified it a little bit before they actually put it onto the books. As Stuart Brand said back in 1984 “information wants to be free.”

InfoSec 52

InfoSec Manufacturing Technology Software 52

Thales Cloud Protection & Licensing

NOVEMBER 7, 2017

For those who are unfamiliar, the NIST Cybersecurity Framework was created in 2013 as an attempt to standardize practices and give guidance on common, high-level security and privacy risks. In addition, IoT devices rarely follow the principles of security by design. Public key infrastructure (PKI) helps to address many of these concerns.

IoT 97

IoT Cybersecurity Manufacturing Digital transformation 97

CyberSecurity Insiders

SEPTEMBER 24, 2021

As per the Hangzhou company that also offers IoT solutions, the only way to remediate the issue is to download the latest firmware from its website and keep the device updated with the software. It has a global business presence since 2001 and slowly captured the CCTV market of United States between 2013 to 2020.

Surveillance 96

Surveillance Firmware DDOS IoT 96