Hacking Digital License Plates
Schneier on Security
DECEMBER 17, 2024
By removing a sticker on the back of the plate and attaching a cable to its internal connectors, he’s able to rewrite a Reviver plate’s firmware in a matter of minutes.
Hacking the Sony Playstation 5
Schneier on Security
NOVEMBER 10, 2021
I just don’t think it’s possible to create a hack-proof computer system, especially when the system is physically in the hands of the hackers. The two exploits are particularly notable due to the level of access they theoretically give to the PS5’s software.
Hacking 
351
351 Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Mazda Connect flaws allow to hack some Mazda vehicles
Security Affairs
NOVEMBER 9, 2024
As of the publication, no publicly known vulnerabilities have been identified in the latest firmware version. CVE-2024-8356 : Unsigned code vulnerability in VIP MCU, allowing unauthorized firmware uploads that could impact vehicle subsystems. ” concludes the report.
Hacking 130
130 
Hacking a Power Supply
Schneier on Security
JULY 21, 2020
This hack targets the firmware on modern power supplies. Yes, power supplies are also computers.).
Hacking 241
241 
MY TAKE: Why locking down ‘firmware’ has now become the next big cybersecurity challenge
The Last Watchdog
JUNE 10, 2019
Locking down firmware. Starks Federal Communications Commission member Geoffrey Starks recently alluded to the possibility that China may have secretly coded the firmware in Huawei’s equipment to support cyber espionage and cyber infrastructure attacks. telecoms by Chinese tech giant Huawei.
Firmware 233
233 
Hacking Hardware Security Modules
Schneier on Security
JUNE 20, 2019
Finally, we exploit a cryptographic bug in the firmware signature verification to upload a modified firmware to the HSM. This firmware includes a persistent backdoor that survives a firmware update. The presented attacks allow retrieving all HSM secrets remotely, including cryptographic keys and administrator credentials.
Firmware 267
267 
Netgear urges users to upgrade two flaws impacting WiFi router models
Security Affairs
FEBRUARY 4, 2025
Netgear addressed two critical vulnerabilities, internally tracked as PSV-2023-0039 and PSV-2021-0117 , impacting multiple WiFi router models and urged customers to install the latest firmware. XR1000v2, the issue was fixed in firmware version 1.1.0.22 XR1000v2, the issue was fixed in firmware version 1.1.0.22 Click Download.
Firmware 109
109 
Japanese Government Will Hack Citizens' IoT Devices
Schneier on Security
JANUARY 28, 2019
Hackers can also build botnets with the help of exploits and vulnerabilities in router firmware, but the easiest way to assemble a botnet is by collecting the ones that users have failed to secure with custom passwords. I am interested in the results of this survey.
IoT 264
264 
ASUS routers with AiCloud vulnerable to auth bypass exploit
Security Affairs
APRIL 18, 2025
. “An improper authentication control vulnerability exists in certain ASUS router firmware series. “We have released new firmware update for 3.0.0.4_382, 3.0.0.4_386, 3.0.0.4_388, 3.0.0.6_102 series.” Asus also urges users to update the routers firmware via the ASUS support page when available.
Firmware 116
116 
SHARED INTEL: How ‘memory attacks’ and ‘firmware spoilage’ circumvent perimeter defenses
The Last Watchdog
NOVEMBER 20, 2019
What does Chinese tech giant Huawei have in common with the precocious kid next door who knows how to hack his favorite video game? Related: Ransomware remains a scourge The former has been accused of placing hidden backdoors in the firmware of equipment distributed to smaller telecom companies all across the U.S.
Firmware 174
174 
PTZOptics cameras zero-days actively exploited in the wild
Security Affairs
NOVEMBER 2, 2024
Affected devices use VHD PTZ camera firmware < 6.3.40 “Organizations using VHD PTZ camera firmware < 6.3.40 The manufacturer released firmware updates addressing these flaws.” used in PTZOptics, Multicam Systems SAS, and SMTAV Corporation devices based on Hisilicon Hi3516A V600 SoC V60, V61, and V63.”
Firmware 122
122 
SonicWall warns of an exploitable SonicOS vulnerability
Security Affairs
JANUARY 8, 2025
” SonicWall is urging customers to upgrade the SonicOS firmware of their firewalls to patch an authentication bypass vulnerability tracked as CVE-2024-53704 (CVSS score of 8.2). The same firmware upgrade contains mitigations for additional, less-critical vulnerabilities.”
Firewall 115
115 
Samsung zero-day flaw actively exploited in the wild
Security Affairs
OCTOBER 22, 2024
. “By interacting with the IOCTL M2M1SHOT_IOC_PROCESS , the driver which provides hardware acceleration for media functions like JPEG decoding and image scaling may map the userspace pages to I/O pages, execute a firmware command and tear down mapped I/O pages.” ” continues Google Project Zero.
Firmware 145
145 
Firmware attacks, a grey area in cybersecurity of organizations
Security Affairs
APRIL 5, 2021
A new report published by Microsoft revealed that 80% of global enterprises were victims of a firmware-focused cyberattack. The study pointed out that only 29% of the targeted organizations have allocated budgets to protect firmware. Firmware vulnerabilities are also exacerbated by a lack of awareness and a lack of automation.”
Firmware 145
145 
Crashing iPhones with a Flipper Zero
Schneier on Security
NOVEMBER 6, 2023
The Flipper Zero is an incredibly versatile hacking device. These types of hacks have been possible for decades, but they require special equipment and a fair amount of expertise. Now it can be used to crash iPhones in its vicinity by sending them a never-ending stream of pop-ups.
Firmware 334
334 
Hacking Wireless Bicycle Shifters
Schneier on Security
AUGUST 20, 2024
This is yet another insecure Internet-of-things story , this one about wireless gear shifters for bicycles. These gear shifters are used in big-money professional bicycle races like the Tour de France, which provides an incentive to actually implement this attack. Research paper. Another news story. Slashdot thread.
Wireless 307
307 
UEFICANHAZBUFFEROVERFLOW flaw in Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models
Security Affairs
JUNE 21, 2024
A serious vulnerability (CVE-2024-0762) in the Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models. Firmware security firm Eclypsium discovered a vulnerability, tracked as CVE-2024-0762 (CVSS of 7.5), in the Phoenix SecureCore UEFI firmware. ” concludes the report.
Firmware 135
135 
China-linked APT BlackTech was spotted hiding in Cisco router firmware
Security Affairs
SEPTEMBER 27, 2023
US and Japanese authorities warn that a China-linked APT BlackTech planted backdoor in Cisco router firmware to hack the businesses in both countries. The state-sponsored hackers was observed using a custom firmware backdoor which was enabled and disabled by sending specially crafted TCP or UDP packets to the devices.
Firmware 137
137 
BootKitty Linux UEFI bootkit spotted exploiting LogoFAIL flaws
Security Affairs
DECEMBER 3, 2024
The ‘Bootkitty’ Linux UEFI bootkit exploits the LogoFAIL flaws (CVE-2023-40238) to target systems using vulnerable firmware. Researchers from firmware security firm Binarly now report that Bootkitty Linux UEFI bootkit exploits the LogoFAIL flaw CVE-2023-40238 to compromise systems running on vulnerable firmware.
Firmware 107
107 
Android devices shipped with backdoored firmware as part of the BADBOX network
Security Affairs
OCTOBER 8, 2023
Researchers warn that more than 70,000 Android smartphones, CTV boxes, and tablets were shipped with backdoored firmware as part of BADBOX network. Cybersecurity researchers at Human Security discovered a global network of consumer products, dubbed BADBOX, with firmware backdoors installed and sold through a compromised hardware supply chain.
Firmware 145
145 
New iLOBleed Rootkit, the first time ever that malware targets iLO firmware
Security Affairs
DECEMBER 30, 2021
iLOBleed, is a previously undetected rootkit that was spotted targeting the HP Enterprise’s Integrated Lights-Out ( iLO ) server management technology to tamper with the firmware modules and wipe data off the infected systems. SecurityAffairs – hacking, iLOBleed). ” reads the report published by the expers.
Firmware 144
144 
Three UEFI Firmware flaws found in tens of Lenovo Notebook models
Security Affairs
JULY 13, 2022
IT giant Lenovo released security fixes to address three vulnerabilities that impact the UEFI firmware shipped with over 70 product models. The three buffer overflow vulnerabilities in UEFI firmware, tracked as CVE-2022-1890, CVE-2022-1891, and CVE-2022-1892, were discovered by researchers from ESET. SecurityAffairs – hacking, Lenovo).
Firmware 142
142 
Synology fixed critical flaw impacting millions of DiskStation and BeePhotos NAS devices
Security Affairs
NOVEMBER 6, 2024
Security researcher Rick de Jager demonstrated the vulner ability, called RISK:STATION by cybersecurity firm Midnight Blue, at the Pwn2Own Ireland 2024 hacking contest. Midnight Blue assumes all Synology firmware versions before the patch are vulnerable, so users should apply the patch immediately.
Firmware 125
125 
ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems
Security Affairs
JANUARY 17, 2025
The Unified Extensible Firmware Interface (UEFI) is a specification that defines a software interface between an operating system and platform firmware. Over the years, experts observed several attacks employing rootkits that were specifically developed to target the firmware to achieve persistence and bypassing security solutions.
Firmware 108
108 
QNAP urges users to update NAS firmware and app to prevent infections
Security Affairs
SEPTEMBER 29, 2020
While the AgeLocker ransomware continues to target QNAP NAS systems, the Taiwanese vendor urges customers to update the firmware and apps. Taiwanese vendor QNAP is urging its customers to update the firmware and apps installed on their network-attached storage (NAS) devices to prevent AgeLocker ransomware infections.
Firmware 145
145 
Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices
Security Affairs
JANUARY 15, 2025
At the beginning of the year, and as a positive start for us, and in order to solidify the name of our group in your memory, we are proud to announce our first official operation: Will be published of sensitive data from over 15,000 targets worldwide (both governmental and private sectors) that have been hacked and their data extracted.”
VPN 131
131 
NFC Flaws in POS Devices and ATMs
Schneier on Security
JUNE 28, 2021
Now Rodriguez has built an Android app that allows his smartphone to mimic those credit card radio communications and exploit flaws in the NFC systems’ firmware. He declined to specify or disclose those flaws publicly due to nondisclosure agreements with the ATM vendors.
Firmware 331
331 
Western Digital customers have to update their My Cloud devices to latest firmware version
Security Affairs
DECEMBER 18, 2021
My Cloud OS firmware is reaching the end of support, Western Digital customers have to update their WD My Cloud devices to the latest version. Devices on these older firmware versions will not receive security fixes or technical support.” SecurityAffairs – hacking, Western Digital). Pierluigi Paganini.
Firmware 135
135 
Google fixed an actively exploited zero-day in the Pixel Firmware
Security Affairs
JUNE 13, 2024
Google is warning of a security vulnerability impacting its Pixel Firmware that has been actively exploited in the wild as a zero-day. Google warned of an elevation of privilege vulnerability, tracked as CVE-2024-32896, in the Pixel Firmware, which has been exploited in the wild as a zero-day. ” reads the advisory.
Firmware 125
125 
Another 0-Day Looms for Many Western Digital Users
Krebs on Security
JULY 2, 2021
Researchers Radek Domanski and Pedro Ribeiro originally planned to present their findings at the Pwn2Own hacking competition in Tokyo last year. That update effectively nullified their chances at competing in Pwn2Own, which requires exploits to work against the latest firmware or software supported by the targeted device.
Firmware 363
363 
Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide
Security Affairs
NOVEMBER 2, 2024
Successful exploitation of these vulnerabilities could allow attackers to steal sensitive data, inject firmware payloads, and even reach LAN-connected devices. Attackers maintained persistence through VPN credentials, Active Directory DCSYNC access, and firmware-hooking methods to survive updates.
Firmware 122
122 
BlackLotus Malware Hijacks Windows Secure Boot Process
Schneier on Security
MARCH 8, 2023
These sophisticated pieces of malware target the UEFI—short for Unified Extensible Firmware Interface —the low-level and complex chain of firmware responsible for booting up virtually every modern computer. As the mechanism that bridges a PC’s device firmware with its operating system, the UEFI is an OS in its own right.
Malware 290
290 
Sophos backports fix for CVE-2022-3236 for EOL firewall firmware versions due to ongoing attacks
Security Affairs
DECEMBER 13, 2023
Sophos backports the patch for CVE-2022-3236 for end-of-life (EOL) firewall firmware versions due to ongoing attacks exploiting the issue. No action is required if organizations have upgraded their firewalls to a supported firmware version after September 2022. All the vulnerable devices are running end-of-life (EOL) firmware.
Firmware 132
132 
New Triada Trojan comes preinstalled on Android devices
Security Affairs
APRIL 2, 2025
The researchers speculate that threat actors behind this variant have compromised the supply chain, so stores may not even suspect that they are selling smartphones infected with Triada “The new version of the malware is distributed in the firmware of infected Android devices. It is located in the system framework.
Malware 122
122 
Hikvision cameras could be remotely hacked due to critical flaw
Security Affairs
SEPTEMBER 22, 2021
The vulnerability is an unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware, it was discovered by a security researcher that goes online with the moniker “Watchful IP.”. The expert pointed out that every firmware developed since 2016 has been tested and found to be vulnerable.
Hacking 132
132 
How to hack Wincor Cineo ATMs to bypass black-box attack protections and withdraw cash
Security Affairs
NOVEMBER 1, 2021
Researchers demonstrated how crooks could hack Diebold Nixdorf’s Wincor Cineo ATMs to bypass black-box attack protections and withdraw cash. An attacker with access to the dispenser controller’s USB port can install an outdated or modified firmware version to bypass the encryption and make cash withdrawals. score of 6.8.
Hacking 137
137 
IoT Unravelled Part 3: Security
Troy Hunt
NOVEMBER 25, 2020
I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Let's got through the options: Firmware Patching I'll start with the devices themselves and pose a question to you: can you remember the last time you patched the firmware in your light globes? Or vibrator.
IoT 363
363 
Attack Against PC Thunderbolt Port
Schneier on Security
MAY 12, 2020
All the evil maid needs to do is unscrew the backplate, attach a device momentarily, reprogram the firmware, reattach the backplate, and the evil maid gets full access to the laptop," says Ruytenberg, who plans to present his Thunderspy research at the Black Hat security conference this summeror the virtual conference that may replace it. "All
Firmware 274
274 
Over 178,000 SonicWall next-generation firewalls (NGFW) online exposed to hack
Security Affairs
JANUARY 15, 2024
. “The latest available firmware protects against both vulnerabilities, so be sure to upgrade immediately (and make sure the management interface isn’t exposed to the internet).” ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, SonicWall)
Firewall 144
144 
MikroTik botnet relies on DNS misconfiguration to spread malware
Security Affairs
JANUARY 16, 2025
The researchers found that the botnet comprises MikroTik routers with various firmware versions, including recent ones. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, MikroTik botnet)
DNS 139
139 
Planet WGS-804HPT Industrial Switch flaws could be chained to achieve remote code execution
Security Affairs
JANUARY 19, 2025
” The firmware analysis performed by the experts revealed vulnerabilities in the dispatcher.cgi interface of WGS-804HPT switches’ web service. Planet Technology has released firmware version 1.305b241111 to address these issues. .” reads the advisory published by Claroty. ” concludes the report. .
Firmware 70
70 
China-linked APT Mustang Panda targets TP-Link routers with a custom firmware implant
Security Affairs
MAY 16, 2023
China-linked APT group Mustang Panda employed a custom firmware implant targeting TP-Link routers in targeted attacks since January 2023. In most recent attacks observed by Check Point, the threat actors employed custom firmware implant designed explicitly for TP-Link routers. ” reads the report published by Check point.
Firmware 98
98 
Undocumented hidden feature found in Espressif ESP32 microchip
Security Affairs
MARCH 9, 2025
Through reverse engineering, Targolic researchers discovered hidden commeds (code 0x3F) in the ESP32 Bluetooth firmware. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,ESP32 microchip manufactured by Espressif)
Manufacturing 127
127 
AMD fixed a flaw that allowed to load malicious microcode
Security Affairs
FEBRUARY 4, 2025
AMD released a microcode and SEV firmware update to address the issue, requiring a BIOS update and reboot for attestation verification. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, SEV)
Encryption 98
98 
Let's personalize your content