eSecurity Planet

AUGUST 20, 2024

Enable Multi-Factor Authentication (MFA) Even if your password is compromised, MFA adds an extra layer of security by requiring a second verification form, such as a code sent to your phone or generated by an authentication app. This can typically be done in the account settings under the security section.

Identity Theft 130

Identity Theft Data breaches Passwords Encryption 130

eSecurity Planet

SEPTEMBER 9, 2024

” To reduce risks, replace unsupported equipment, apply available firmware updates, and keep an accurate IT asset inventory. The fix: Zyxel has published security upgrades , and end users must immediately upgrade impacted devices to the most recent firmware releases. All impacted models must be updated to version 7.00

Firmware 109

Firmware Backups Firewall Risk 109

eSecurity Planet

JANUARY 16, 2024

The problem: WordPress plugin Popup Builder is vulnerable to exploitation through a flaw that allows attackers to perform administrator-level actions like installing new rogue plugins or creating new admin accounts. According to Bitdefender, the thermostat does not validate the authenticity of a new firmware update.

Firewall 109

Firewall Firmware IoT Authentication 109

eSecurity Planet

OCTOBER 24, 2023

Strengthen Router Security: Enhance your router’s security by changing default login credentials. Regularly update router firmware to patch vulnerabilities and close potential avenues of attack. Automate Updates: Automate updates where possible to receive crucial security patches without manual intervention.

Malware 122

Malware Antivirus Software Passwords 122

eSecurity Planet

NOVEMBER 6, 2023

The Problem: Three flaws discovered by the Kubernetes security community carry CVSS severity scores of 7.6 Non-privileged threat actors can exploit these drivers to gain complete device control, execute arbitrary code, modify firmware, and escalate operating system privileges, posing a significant security risk.

Software 112

Software Education Ransomware Firmware 112

eSecurity Planet

JANUARY 22, 2024

The problem: The Unified Extensible Firmware Interface (UEFI) specification has an open-source network implementation, EDK II, with nine discovered vulnerabilities. The authenticated user must also be logged into an account on an instance of GHES. GitHub has already rotated the credentials for these issues.

Authentication 113

Authentication Malware VPN Mobile 113

eSecurity Planet

MARCH 4, 2024

The fix: To eliminate malware infections, perform a factory reset, upgrade to the latest firmware, change all default usernames and passwords, and adjust firewall rules to block exposure to unwanted remote management services. Email Address By signing up to receive our newsletter, you agree to our Terms of Use and Privacy Policy.

IoT 117

IoT Internet Internet Ransomware 117