The Hacker News

DECEMBER 21, 2021

Multiple backdoors have been discovered during a penetration test in the firmware of a widely used voice over Internet Protocol (VoIP) appliance from Auerswald, a German telecommunications hardware manufacturer, that could be abused to gain full administrative access to the devices.

Penetration Testing 140

Penetration Testing Firmware Telecommunications Manufacturing 140

Penetration Testing

APRIL 6, 2024

A serious vulnerability has been uncovered in Brocade Fabric OS, the firmware used by popular Fibre Channel switches found in numerous enterprise data centers.

Penetration Testing 137

Penetration Testing Firmware 137

Penetration Testing

DECEMBER 1, 2023

Numerous security vulnerabilities collectively known as LogoFAIL enable malefactors to interfere with the booting process of computer devices and implant bootkits, owing to issues related to image analysis components used by motherboard manufacturers for... The post LogoFAIL Vulnerabilities Expose Firmware Attacks: Endpoint Security Solutions (..)

Firmware 86

Firmware Penetration Testing Risk Manufacturing 86

Penetration Testing

FEBRUARY 19, 2024

Recently, Intel disclosed a total of 34 security vulnerabilities, encompassing 32 software issues and 2 firmware issues.

Penetration Testing 135

Penetration Testing Firmware Software 135

Penetration Testing

SEPTEMBER 30, 2024

These vulnerabilities range in severity, with potential... The post PLANET Technology Switches Face CVE-2024-8456 (CVSS 9.8), Urgent Firmware Updates Advised appeared first on Cybersecurity News.

Firmware 115

Firmware Technology Cybersecurity 115

Security Boulevard

AUGUST 13, 2024

Introduction Penetration tests come in many different varieties with the scope varying from all-inclusive to highly specific. When the penetration testing engagement includes devices there is an opportunity to both highlight weaknesses and weaponize the firmware.

Firmware 59

Firmware Penetration Testing 59

Penetration Testing

JULY 11, 2024

The vulnerability was reported to D-Link by third-party security researcher... The post CVE-2024-39202: RCE Flaw Found in D-Link DIR-823X Firmware, Patch in Development appeared first on Cybersecurity News.

Firmware 116

Firmware Wireless Risk Cybersecurity 116

Penetration Testing

MAY 2, 2024

Cisco has issued a security advisory highlighting multiple vulnerabilities in the firmware of several IP Phone models that could allow unauthenticated, remote attackers to engage in detrimental activities ranging from denial of service (DoS)... The post Cisco IP Phones Exposed: Vulnerabilities Allow Hackers to Disrupt, Spy, and Even Make (..)

Penetration Testing 95

Penetration Testing Firmware 95

Penetration Testing

OCTOBER 31, 2024

Hikvision, a leading provider of network cameras and surveillance systems, has released firmware updates to address a security vulnerability that could expose users’ Dynamic DNS credentials.

Firmware 81

Firmware DNS Surveillance Cybersecurity 81

Penetration Testing

MARCH 8, 2024

Kontrol and Elock locks, both utilizing firmware from the company Sciener, have been found riddled with... The post Critical Vulnerabilities Found in Popular Smart Locks appeared first on Penetration Testing.

Penetration Testing 102

Penetration Testing Firmware Technology 102

Penetration Testing

OCTOBER 17, 2024

Cisco has recently disclosed a series of high-severity vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter firmware, including both on-premises and multiplatform variants. These vulnerabilities present a significant... The post Cisco ATA 190 Series Analog Telephone Adapter Firmware Flaws Exposed: Patch Now!

Firmware 84

Firmware Cybersecurity 84

Penetration Testing

DECEMBER 1, 2024

This new threat exploits the LogoFAIL vulnerability (CVE-2023-40238), a UEFI firmware flaw,... The post Security Alert: Bootkitty Bootkit Targets Linux via UEFI Vulnerability (CVE-2023-40238) appeared first on Cybersecurity News.

Firmware 65

Firmware Cybersecurity Malware 65

Penetration Testing

OCTOBER 18, 2024

Synology has issued a security advisory, Synology-SA-24:17, warning of critical vulnerabilities in several of its camera firmware products, including Synology Camera BC500, TC500, and CC400W.

Firmware 79

Firmware Cybersecurity 79

Penetration Testing

MARCH 14, 2024

Industrial automation leader Phoenix Contact has issued an urgent security alert regarding multiple critical vulnerabilities discovered within the firmware of their CHARX SEC charge controllers.

Penetration Testing 92

Penetration Testing Firmware 92

Penetration Testing

MARCH 18, 2025

In a recent security advisory, the Cybersecurity and Infrastructure Security Agency (CISA) revealed multiple critical vulnerabilities impacting Sungrows The post Critical Vulnerabilities Found in Sungrow iSolarCloud App and WiNet Firmware appeared first on Cybersecurity News.

Firmware 65

Firmware Cybersecurity 65

Penetration Testing

NOVEMBER 21, 2023

Researchers from the Electronic Frontier Foundation (EFF) have discovered that the firmware of the popular U.S.-based

Penetration Testing 86

Penetration Testing Malware Firmware 86

Penetration Testing

DECEMBER 3, 2024

Zyxel Networks has released firmware updates to address multiple vulnerabilities affecting a range of its networking products, including 4G LTE/5G NR CPEs, DSL/Ethernet CPEs, fiber ONTs, and WiFi extenders. The... The post Protect Your Network: Zyxel Issues Firmware Updates appeared first on Cybersecurity News.

Firmware 65

Firmware Cybersecurity 65

Penetration Testing

JULY 7, 2020

efiXplorer – IDA plugin for UEFI firmware analysis and reverse engineering automation Supported versions of Hex-Rays products: every time we focus on the last versions of IDA and Decompiler because trying to use the most... The post efiXplorer v6.0

Firmware 52

Firmware Engineering Penetration Testing 52

Penetration Testing

JULY 25, 2024

could allow remote attackers... The post HPE Servers Exposed: Critical Vulnerability Demands Urgent Firmware Update appeared first on Cybersecurity News. A critical security vulnerability, CVE-2021-38578, has been discovered in a wide range of HPE ProLiant, Alletra, Synergy, Apollo, and Edgeline servers.

Firmware 69

Firmware Cybersecurity 69

Penetration Testing

AUGUST 10, 2024

The vulnerabilities, tracked under CVE-2024-39225 through CVE-2024-39229 and CVE-2024-3661, expose users to severe... The post GL-iNet Routers Exposed to Critical Vulnerabilities: Urgent Firmware Updates Required appeared first on Cybersecurity News.

Firmware 70

Firmware Cybersecurity 70

Security Affairs

AUGUST 16, 2024

The “Showcase.apk” package, developed by Smith Micro, is part of the firmware image on millions of Android Pixel phones, potentially enhancing sales in Verizon stores. The app is preinstalled in Pixel firmware and included in Google’s OTA updates for Pixel devices. . ” concludes the report.

Hacking 143

Hacking Firmware Mobile Penetration Testing 143

eSecurity Planet

APRIL 18, 2022

Also read: Best Penetration Testing Tools. Top Open Source Penetration Testing Tools. Antivirus and EDR tools, SIEM systems (security information and event management), security vendors, software, hardware, firmware, and operating systems. What Data Do Hackers Collect? Financial data and intellectual property.

Penetration Testing 144

Penetration Testing DNS Firmware Antivirus 144

Penetration Testing

MARCH 28, 2021

emba, an analyzer for Linux-based firmware of embedded devices Why? emba is being developed as a firmware scanner that analyses already-extracted Linux-based firmware images. releases: analyzer for Linux-based firmware of embedded devices appeared first on Penetration Testing.

Firmware 40

Firmware Penetration Testing IoT 40

Penetration Testing

AUGUST 26, 2019

ME Analyzer is a tool which parses Intel Engine firmware images from the Converged Security Management Engine, Converged Security Trusted Execution Engine, Converged Security Server Platform Services, Management Engine, Trusted Execution Engine & Server... The post ME Analyzer v1.304.4

Firmware 40

Firmware Engineering Penetration Testing 40

Security Affairs

DECEMBER 27, 2021

The backdoors were discovered as part of penetration testing, they allow attackers to gain full administrative access to the impacted devices. The researchers performed reverse engineering of the firmware image for the COMpact 5500, version 7.8A “Firmware Update 8.2B

Firmware 112

Firmware Manufacturing Passwords Penetration Testing 112

Security Affairs

JUNE 12, 2022

By using the manufacturer’s built-in ports, we were able to manipulate on-board components and interact with the device.Combining both known and novel techniques, we were able to achieve root access to the device’s operating system and pull its firmware for emulation and vulnerability discovery.” Overall 4.8. ” reads the advisory.

Firmware 109

Firmware Penetration Testing Manufacturing Authentication 109

Penetration Testing

OCTOBER 10, 2024

Attackers are exploiting previously known vulnerabilities in the... The post Zyxel Devices Targeted by Malicious Actors: Urgent Firmware Update Required appeared first on Cybersecurity News.

Firmware 53

Firmware Cybersecurity VPN 53

Penetration Testing

AUGUST 21, 2024

A critical vulnerability, identified as CVE-2024-41992, has been discovered in the Arcadyan FMIMG51AX000J model, and potentially other WiFi Alliance-affiliated devices using the same firmware version (DUT-Wi-FiTestSuite-9.0.0).

Firmware 122

Firmware Cybersecurity 122

Penetration Testing

SEPTEMBER 16, 2024

TWCERT/CC, Taiwan’s cybersecurity agency, has issued urgent advisories, urging users to update their firmware immediately... The post Multiple Critical Vulnerabilities Found in D-Link WiFi Routers: Immediate Firmware Updates Advised appeared first on Cybersecurity News.

Firmware 50

Firmware Cybersecurity 50

eSecurity Planet

APRIL 28, 2023

Third-party vendor systems include Operating Systems (OS), firmware (software installed on hardware), and applications. Vulnerability management uses periodic, proactive testing to locate new vulnerabilities and continuously tracks older vulnerabilities. and installed software (browsers, accounting software, etc.),

Penetration Testing 110

Penetration Testing IoT Firmware Software 110

Penetration Testing

DECEMBER 30, 2024

Security researchers NSG650 and Pdawg have unveiled a proof-of-concept UEFI bootkit that exploits a critical firmware function to compromise the Windows kernel during the boot process.

Firmware 94

Firmware Cybersecurity Malware 94

Penetration Testing

DECEMBER 9, 2024

OpenWrt, a popular open-source operating system for embedded devices, has disclosed a critical vulnerability (CVE-2024-54143) that could allow attackers to compromise the integrity of firmware updates delivered through its Attended... The post CVE-2024-54143: Critical Vulnerability in OpenWrt’s Attended SysUpgrade Server Allows for (..)

Firmware 47

Firmware Cybersecurity 47

Penetration Testing

MARCH 12, 2025

AMI, a leading provider of BIOS and BMC firmware, has announced security advisories addressing multiple vulnerabilities affecting its The post CVE-2024-54085: AMI SPx Vulnerability Scores Critical CVSS 10 appeared first on Cybersecurity News.

Firmware 74

Firmware Cybersecurity 74

eSecurity Planet

NOVEMBER 18, 2021

This penetration testing can generate a payload and, above all, emulate incoming connections with the infected machine once the hacker is in. It can even attack the chip’s firmware and provide root access on the device, which gives more privileges and capabilities than the user. How to Protect against Payloads.

Penetration Testing 134

Penetration Testing Social Engineering Software Wireless 134

Malwarebytes

MARCH 22, 2024

The Flipper Zero is a portable device that can be used in penetration testing with a focus on wireless devices and access control systems. Flipper Zero made headlines in October because versions running third-party firmware could be used to crash iPhones running iOS 17 (since resolved in iOS 17.2).

Penetration Testing 127

Penetration Testing Wireless Firmware Technology 127

Penetration Testing

JUNE 16, 2024

ASUS has released an urgent firmware update to address a critical security vulnerability affecting seven of its router models. The flaw, tracked as CVE-2024-3080 with a CVSS v3.1 score of 9.8, allows unauthenticated remote... The post ASUS Issues Critical Security Update for Router Vulnerability CVE-2024-3080 (CVSS 9.8)

Firmware 95

Firmware Cybersecurity 95

The Last Watchdog

SEPTEMBER 4, 2018

DeSanto: So before people did the simulated event in a lab setting, tied to a performance test, and so they were doing it as a spot check. It was done, for instance, while upgrading a device, to check to make sure the firmware didn’t have any bugs and that all the necessary signatures were in place, where needed. LW: Engagements?

Penetration Testing 133

Penetration Testing Firewall Data breaches Malware 133