Firmware, IoT and Surveillance - Cyber Security Informer

An RCE in Annke video surveillance product allows hacking the device

Security Affairs

AUGUST 27, 2021

Researchers from Nozomi Networks discovered a critical vulnerability that can be exploited to hack a video surveillance product made by Annke. The vulnerability, tracked as CVE-2021-32941 can be exploited by an attacker to hack a video surveillance product made by Annke, a provider of home and business security solutions.

Surveillance

Surveillance Hacking Firmware Manufacturing

Kalay cloud platform flaw exposes millions of IoT devices to hack

Security Affairs

AUGUST 17, 2021

FireEye Mandiant researchers have discovered a critical vulnerability in the Kalay cloud platform that exposes millions of IoT devices to attacks. The flaw could be easily exploited by a remote attacker to take over an IoT device, the only info needed for the attack is the Kalay unique identifier (UID) of the targeted user.

IoT

IoT Hacking Social Engineering Firmware

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature

Security Affairs

OCTOBER 10, 2018

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature, a gift for APT groups and cyber crime syndicates. The flaws reside in a feature named the “XMEye P2P Cloud” that is enabled by default which is used to connect surveillance devices to the cloud infrastructure. Pierluigi Paganini.

Surveillance

Surveillance Hacking Firmware Manufacturing

Overview of IoT threats in 2023

SecureList

SEPTEMBER 21, 2023

IoT devices (routers, cameras, NAS boxes, and smart home components) multiply every year. The first-ever large-scale malware attacks on IoT devices were recorded back in 2008, and their number has only been growing ever since. Telnet, the overwhelmingly popular unencrypted IoT text protocol, is the main target of brute-forcing.

IoT

IoT DDOS Passwords Malware

Guardzilla Security Video System Footage exposed online

Security Affairs

DECEMBER 29, 2018

A vulnerability in the Guardzilla home video surveillance system could be exploited by users to watch Guardzilla footage of other users. The Guardzilla All-In-One Video Security System is an indoor video surveillance solution. This was determined through static analysis of the firmware shipping with the device.

Firmware

Firmware Surveillance IoT Passwords

Botnet operators target multiple zero-day flaws in LILIN DVRs

Security Affairs

MARCH 23, 2020

Experts observed multiple botnets exploiting zero-day vulnerabilities in DVRs for surveillance systems manufactured by Taiwan-based LILIN. Botnet operators are exploiting several zero-day vulnerabilities in digital video recorders (DVRs) for surveillance systems manufactured by Taiwan-based LILIN-. ” Netlab concludes.

Firmware

Firmware Surveillance Manufacturing Advertising

Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras

Threatpost

SEPTEMBER 17, 2018

Firmware used in up to 800,000 CCTV cameras open to attack thanks to buffer overflow zero-day bug.

Surveillance

Surveillance Firmware IoT Hacking

Vulnerability makes hackers hijack video streams from millions of connected cameras

CyberSecurity Insiders

JUNE 29, 2021

A recent study made by Nozomi Networks, a security company that offers solutions for IoT products has discovered that millions of connected cameras are on the verge of being hijacked by cyber crooks through a vulnerability. US Cybersecurity and Infrastructure Security Agency issued a warning recently and assigned a 9.1

Firmware

Firmware IoT Surveillance Manufacturing

Beastmode Mirai botnet now includes exploits for Totolink routers

Security Affairs

APRIL 2, 2022

The threat actors added TOTOLINK exploits just a week after the exploit codes were publicly released on GitHub in the attempt to compromise the largest number of devices as possible before the owners upgrade to the latest firmware releases. TOTOLINK has already addressed these flaws with the release of new firmware for vulnerable devices.

DDOS

DDOS Firmware Surveillance IoT

A bowl full of security problems: Examining the vulnerabilities of smart pet feeders

SecureList

JUNE 20, 2023

The findings of the study reveal a number of serious security issues, including the use of hard-coded credentials, and an insecure firmware update process. We later managed to extract the firmware from the EEPROM for further static reverse engineering. Further hardware analysis of the circuit board helped us identify chips.

Firmware

Firmware Passwords Manufacturing Mobile

JekyllBot:5 flaws allow hacking TUG autonomous mobile robots in hospitals

Security Affairs

APRIL 13, 2022

Researchers at healthcare IoT security firm Cynerio discovered a collection of five vulnerabilities impacting TUG autonomous mobile robots, collectively named JekyllBot:5 , that could be exploited by remote attackers to hack the devices. .”

Mobile

Mobile Hacking Firmware Surveillance

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT

IoT Hacking Internet Internet

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT

IoT Hacking Internet Internet

The Death botnet grows targeting AVTech devices with a 2-years old exploit

Security Affairs

JULY 25, 2018

AVTech is one of the world’s leading CCTV manufacturers, it is the largest public-listed company in the Taiwan surveillance industry. EliteLands is using a 2-years old exploit that could be used to trigger tens of well-known vulnerabilities in the AVTech firmware.

Firmware

Firmware Passwords Advertising IoT

Episode 254: Dennis Giese’s Revolutionary Robot Vacuum Liberation Movement

The Security Ledger

DECEMBER 19, 2023

Security researcher and IoT hacker Dennis Giese talks about his mission to liberate robot vacuums from the control of their manufacturers, letting owners tinker with their own devices and - importantly - control the data they collect about our most intimate surroundings. Forget the IoT. Read the whole entry. »

IoT

IoT Internet Internet Manufacturing

Experts discloses dangerous flaws in robotic Dongguan Diqee 360 smart vacuums

Security Affairs

JULY 20, 2018

Positive Technologies discovered two flaws affecting Dongguan Diqee 360 smart vacuums that can be used to perform video surveillance. “Like any other IoT device, these robot vacuum cleaners could be marshalled into a botnet for DDoS attacks, but that’s not even the worst-case scenario, at least for owners. .”

Firmware

Firmware Surveillance Technology Authentication

Security experts disclosed Wyze data leak

Security Affairs

DECEMBER 29, 2019

IoT vendor Wyze announced that one of its servers exposed the details of roughly 2.4 IoT vendor Wyze announced that details of roughly 2.4 The incident was independently verified by the authors of the blog IPVM that focuses on video surveillance products. million customers. million customers were accidentally exposed online.

IoT

IoT Accountability Advertising Wireless

What Is Industrial Control System (ICS) Cyber Security?

eSecurity Planet

SEPTEMBER 9, 2024

The potential for cyberattacks increases with industrial control systems becoming more interconnected through the Internet of Things (IoT) and cloud-based systems. Patch management: Keeping software and firmware up to date to close security gaps. What is the Importance of Cybersecurity in an Industrial Control System (ICS)?

Firmware

Firmware Encryption Manufacturing Risk

"In our modern world, countless applications rely on radio frequency elements" - an Interview with Larbi Ouiyzme

Pen Test

OCTOBER 12, 2023

Criminals may use hijacked drones for illegal surveillance, smuggling, or even as weapons. It's suitable for resource-constrained RF devices, making it a popular choice for low-power IoT applications. What are the common firmware and software vulnerabilities in RF devices that can be exploited?

Encryption

Encryption Firmware Surveillance Technology

Sony addresses remotely exploitable flaws in Sony IPELA E Network Cameras

Security Affairs

JULY 23, 2018

Both vulnerabilities effects Sony IPELA E series G5 firmware 1.87.00, the tech giant released an update last week to address them. This means that the attacker can provide content to trigger the stack-based buffer overflow that could allow the attacker to remotely execute commands on the affected device.

Advertising

Advertising Firmware Hacking Surveillance

EP 31: Stopping the Mirai IoT Botnet, One CnC Server At A Time

ForAllSecure

OCTOBER 5, 2021

In 2016, the Mirai IoT botnet shut down part of the internet, yet variations still plague us today. Maybe our current approach to IoT botnets isn’t working? They spoke at BlackHat USA 2021 where they launched a new tool to find IoT based CnC servers. Clearly, there needs to be another approach. Davanian: This is Ali.

IoT

IoT DDOS Malware Internet

Vulnerability Recap 7/8/24 – Intel, Cisco & More Face Risks

eSecurity Planet

JULY 8, 2024

These vulnerabilities affected diverse areas, including network infrastructure, software libraries, IoT devices, and even CPUs. Traeger addressed unauthorized controls on IoT grills before July 4th. To protect your network devices from potential risks, apply patches on a regular basis and keep their firmware up to date.

Risk

Risk Authentication Firmware Surveillance

Advanced threat predictions for 2023

SecureList

NOVEMBER 14, 2022

The cyber-offense ecosystem still appears to be shaken by the sudden demise of NSO Group; at the same time, these activities indicate to us that we’ve only seen the tip of the iceberg when it comes to commercial-grade mobile surveillance tooling. The first one, in January, was MoonBounce ; the other was CosmicStrand in July 2022.

Firmware

Firmware Surveillance Mobile Telecommunications

VulnRecap 3/4/24 – Ivanti, Ubiquiti, AppLocker Under Attack

eSecurity Planet

MARCH 4, 2024

The fix: To eliminate malware infections, perform a factory reset, upgrade to the latest firmware, change all default usernames and passwords, and adjust firewall rules to block exposure to unwanted remote management services. The fix: Update libraries and instances to versions patched after February 8, 2024. and a medium (CVSS 4.3)

IoT

IoT Internet Internet Ransomware

Over 100 million Hikvision devices hit by critical cyber vulnerability

CyberSecurity Insiders

SEPTEMBER 24, 2021

China-based video surveillance related product offering company Hikvision has issued a security advisory saying that all those using their security cameras and NVRs must know a critical vulnerability on its devices that could allow hackers to take control of the cameras and use them as bots to launch DDoS or other related attacks.

Surveillance

Surveillance Firmware DDOS IoT

Cyber Security Informer

An RCE in Annke video surveillance product allows hacking the device

Kalay cloud platform flaw exposes millions of IoT devices to hack

Trending Sources

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature

Overview of IoT threats in 2023

Guardzilla Security Video System Footage exposed online

Botnet operators target multiple zero-day flaws in LILIN DVRs

Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras

Vulnerability makes hackers hijack video streams from millions of connected cameras

Beastmode Mirai botnet now includes exploits for Totolink routers

A bowl full of security problems: Examining the vulnerabilities of smart pet feeders

JekyllBot:5 flaws allow hacking TUG autonomous mobile robots in hospitals

The Hacker Mind: Hacking IoT

The Hacker Mind: Hacking IoT

The Death botnet grows targeting AVTech devices with a 2-years old exploit

Episode 254: Dennis Giese’s Revolutionary Robot Vacuum Liberation Movement

Experts discloses dangerous flaws in robotic Dongguan Diqee 360 smart vacuums

Security experts disclosed Wyze data leak

What Is Industrial Control System (ICS) Cyber Security?

"In our modern world, countless applications rely on radio frequency elements" - an Interview with Larbi Ouiyzme

Sony addresses remotely exploitable flaws in Sony IPELA E Network Cameras

EP 31: Stopping the Mirai IoT Botnet, One CnC Server At A Time

Vulnerability Recap 7/8/24 – Intel, Cisco & More Face Risks

Advanced threat predictions for 2023

VulnRecap 3/4/24 – Ivanti, Ubiquiti, AppLocker Under Attack

Over 100 million Hikvision devices hit by critical cyber vulnerability

Stay Connected