Remove Firmware Remove Passwords Remove Security Defenses
article thumbnail

2.9 Billion Records Exposed in NPD Breach: How to Stay Safe

eSecurity Planet

Use Strong, Unique Passwords Weak passwords are easy for hackers to guess or crack, especially if they’re common or reused across multiple sites. When creating passwords, use at least 12 characters, combining uppercase and lowercase letters, numbers, and special symbols.

article thumbnail

Vulnerability Recap 6/24/24 – Patch Highlights Across Platforms

eSecurity Planet

Fortra remedied a hard-coded password issue in the FileCatalyst software. Cybersecurity researchers discovered a buffer overflow flaw in Intel Core processor firmware causing Phoenix Technology to release patches. The problem: Security researchers reported a buffer overflow vulnerability ( CVE-2024-0762 , CVSS 7.5)

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Vulnerability Recap 6/18/24 – Patch Tuesday, Plus More Ivanti Issues

eSecurity Planet

This could allow them to make changes within the device’s firmware. The fix: Upgrade your Pixel device to the most recent security update. The problem: Hardware vendor ASUS released a security notice and firmware update for seven of its routers.

Firmware 113
article thumbnail

What Is Industrial Control System (ICS) Cyber Security?

eSecurity Planet

Encryption and secure communication protocols: Protecting data in transit between ICS components. Patch management: Keeping software and firmware up to date to close security gaps. Firmware manipulation is particularly dangerous because it often remains undetected until significant damage occurs.

Firmware 109
article thumbnail

Vulnerability Recap 8/20/24 – Microsoft Has the Spotlight This Week

eSecurity Planet

Third-Party Application Package Installed on Pixel Devices Type of vulnerability: Third-party application package installed on Pixel device firmware, with insufficient security controls. The problem: Mobile security vendor iVerify’s EDR product discovered an unsecured Android device at data analytics firm Palantir Technologies.

article thumbnail

Vulnerability Recap 9/2/24 – Big Companies Upgrade vs Risks

eSecurity Planet

The fix: Upgrade to SonicWall’s firmware updates for Gen 5 (to version 5.9.2.14-13o), The vulnerability stems from a static password used for the HSQL database, which allows remote attackers to acquire administrative privileges. This default credential vulnerability jeopardizes program security, integrity, and availability.

Risk 57
article thumbnail

Vulnerability Recap 8/12/24 – Old Vulnerabilities Unexpectedly Emerge

eSecurity Planet

If exploited, the vulnerability would allow a threat actor to execute their own code within the processor’s firmware using System Management Mode (SMM). If your business uses Windows, restrict administrative privileges as much as you can and require password resets as soon as possible. This can happen even when SMM is locked.

Firmware 109