Security Affairs

MARCH 3, 2024

Camera doorbells manufactured by the Chinese company Eken Group Ltd under the brands EKEN and Tuck are affected by major vulnerabilities. Researchers from Consumer Reports (CR) discovered severe vulnerabilities in doorbell cameras manufactured by the Chinese company Eken Group Ltd. ” reads the report published by CR.

Manufacturing 357

Manufacturing Retail Sales Communications 357

Security Affairs

FEBRUARY 9, 2020

The best news of the week with Security Affairs. Google mistakenly shared private videos of some users with others in 2019. Japanese defense contractors Pasco and Kobe Steel disclose security breaches. IoT devices at major Manufacturers infected with crypto-miner. A new round of the weekly newsletter arrived!

Security 314

Security Ransomware IoT Manufacturing 314

Security Affairs

MARCH 30, 2023

Popular voice and video conferencing software 3CX was the victim of a supply chain attack, SentinelOne researchers reported. As of Mar 22, 2023, SentinelOne observed a spike in behavioral detections of the 3CXDesktopApp, which is a popular voice and video conferencing software product. “Unfortunately the rumors are true.

File names 246

File names Manufacturing Libraries Cybersecurity 246

Security Affairs

DECEMBER 21, 2018

2018 was the year of the Internet of Things (IoT), massive attacks and various botnets hit smart devices, These are 5 IoT Security Predictions for 2019. The regulation around IoT security was this year’s signal that the answer is, fortunately, no. Insights from VDOO’s leadership. 2019 will continue these trends but at a faster pace.

IoT 278

IoT Security Manufacturing Privacy 278

Data Breach Today

MARCH 28, 2025

Hackers Can Skip Login Protections to Access the 'choco tei' Camera An industrial camera common to Japanese manufacturer production lines has unpatched vulnerabilities allowing hackers to secretly access live footage or stop it from recording.

Manufacturing 130

Manufacturing Access Security IT 130

Krebs on Security

OCTOBER 28, 2020

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. Acting on a tip from Milwaukee, Wis.-based

Security 360

Security Ransomware Agriculture Cybersecurity 360

Security Affairs

JANUARY 2, 2021

The Federal Bureau Investigation (FBI) is warning owners of smart home devices with voice and video capabilities of ‘swatting’ attacks. The FBI has recently issued an alert to warn owners of smart home devices with voice and video capabilities of so-called “swatting” attacks. team to a specific location. Pierluigi Paganini.

Passwords 362

Passwords Manufacturing Authentication Access 362

Security Affairs

OCTOBER 19, 2020

A hacker collective claims to have hacked over 50,000 home security cameras and published their footage online, some of them on adult sites. A group of hackers claims to have compromised over 50,000 home security cameras and published their private footage online. ” continues the article.

IoT 363

IoT Paper Access Manufacturing 363

Security Affairs

JULY 31, 2022

The issue affects Dahua’s implementation of the Open Network Video Interface Forum ( ONVIF ). ONVIF provides and promotes standardized interfaces for effective interoperability of IP-based physical security products. The following versions of Dahua video products, are affected : Dahua ASI7XXX: Versions prior to v1.000.0000009.0.R.220620

Authentication 363

Authentication Manufacturing Security Access 363

Security Affairs

DECEMBER 14, 2022

All too often, this gives them a false sense of security: when in fact, threat actors can not only access and watch your camera feed but exploit the unsecured device to hack into your network. After looking at 28 of the most popular manufacturers, our research team found 3.5 The reign of a Chinese brand. Most insecure brands.

Passwords 363

Passwords Manufacturing Authentication Government 363

Security Affairs

OCTOBER 1, 2023

The ransomware group accused the organization of has attempted to cover up the security breach. Maclaren Your security is at an all-time low, and we’ve proven it to you. The cyber security researcher Dominic Alvieri reported that ALPHV BlackCat Ransomware has breached 15 more US hospitals & 2 HMOs.

Ransomware 345

Ransomware Manufacturing Privacy Security 345

Security Affairs

JANUARY 29, 2023

Every week the best security articles from Security Affairs free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! If you want to also receive for free the newsletter with the international press subscribe here.

Security 246

Security Data breaches Military Ransomware 246

Security Affairs

AUGUST 23, 2021

Razer is a popular manufacturer of computer accessories, including gaming mouses and keyboards. Razer is a very popular computer peripherals manufacturer that designs, develops, and sells consumer electronics, financial services, and gaming hardware, including gaming mouses and keyboards. Pierluigi Paganini.

Computer and Electronics 357

Computer and Electronics Manufacturing Financial Services Access 357

Security Affairs

SEPTEMBER 30, 2023

Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Motel One ) The post ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One appeared first on Security Affairs. the fashion giant Moncler , the Swissport , NCR , and Western Digital.

Ransomware 350

Ransomware Manufacturing Risk IT 350

Security Affairs

MARCH 23, 2020

Experts observed multiple botnets exploiting zero-day vulnerabilities in DVRs for surveillance systems manufactured by Taiwan-based LILIN. Botnet operators are exploiting several zero-day vulnerabilities in digital video recorders (DVRs) for surveillance systems manufactured by Taiwan-based LILIN-. Pierluigi Paganini.

Manufacturing 348

Manufacturing Passwords Access Security 348

Security Affairs

JULY 19, 2021

Security researchers demonstrated how to bypass the Windows Hello facial recognition that is used in Windows 10 as a login mechanism. Microsoft already fixed the vulnerability with the release of July Patch Tuesday security updates. Please contact your device manufacturers for the state of Enhanced Sign-in Security on your device.

Manufacturing 318

Manufacturing Authentication Security Access 318

Security Affairs

JULY 21, 2020

Security researchers from Tencent have devised a technique, dubbed BadPower, to alter the firmware of fast chargers to cause damage to connected systems or cause the device to catch fire. “In rare cases, BadPower attacks may also affect the security of the physical environment around the device.” Pierluigi Paganini.

Manufacturing 329

Manufacturing Security Marketing IT 329

Security Affairs

MAY 26, 2020

In December, security experts atPromon disclosed a vulnerability, dubbed StrandHogg, that has been exploited by tens of malicious Android apps. Experts reported the flaw to Google in December, the tech giant released a security patch to manufacturing companies in April 2020, that are going to release security updates to their devices.

Access 327

Access Manufacturing Phishing Security 327

Security Affairs

APRIL 29, 2019

gaming , video conferencing). “As As with many other airlines, some of our premium seats have in-flight entertainment systems that came with cameras installed by the manufacturer.” The cameras are a standard feature that manufacturers of the system included for possible future purposes such as video conferencing.”

Privacy 249

Privacy Manufacturing Security IT 249

Security Affairs

MAY 27, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Is the BlackByte ransomware gang behind the City of Augusta attack?

Security 246

Security Ransomware Manufacturing Cybersecurity 246

Security Affairs

AUGUST 9, 2024

MediaTek, who manufactures Wi-Fi SoC for Sonos speaker, released a security advisory in March 2024 (CVE-2024-20018). The driver itself was a third-party chipset by MediaTek who has now the associated patch with the March 2024 Security Bulletin (CVE-2024-20018). it also informed customers that no workarounds are available.

Manufacturing 319

Manufacturing Paper Security IT 319

Security Affairs

AUGUST 13, 2022

In a video shared by the group on Telegram, the group claimed to have stolen the personal information of the Lockheed Martin employees, including names, email addresses, phone numbers, and pictures. The post Killnet claims to have breached Lockheed Martin appeared first on Security Affairs. Tanslated with Google). Pierluigi Paganini.

Manufacturing 251

Manufacturing Government IT Security 251

Security Affairs

NOVEMBER 19, 2019

The vulnerabilities are collectively tracked as CVE-2019-2234, attackers could exploit them to conduct several activities, including recording videos, taking photos, recording voice calls, tracking the user’s location. The vulnerabilities could be exploited by threat actors even if the phone is locked and the screen is turned off. .

Manufacturing 224

Manufacturing Metadata Security awareness IoT 224

Security Affairs

NOVEMBER 10, 2023

The security breach exposed the sensitive personal information of 2,192,515 people. Exposed information varied by individual and may include some combination of certain individuals’ names, social Security number, health insurance information, date of birth, and medical information. million individuals. It is a $6.6

Data breaches 342

Data breaches Ransomware Insurance Manufacturing 342

Security Affairs

JUNE 12, 2022

Researchers from security firm Trellix discovered some critical vulnerabilities in HID Mercury Access Controllers that can be exploited by attackers to remotely unlock doors. The flaws impact products manufactured by LenelS2, a provider of advanced physical security solutions (i.e. ” reads the advisory. Pierluigi Paganini.

Access 274

Access Authentication Manufacturing Cybersecurity 274

Security Affairs

JANUARY 17, 2025

Researchers detailed a now-patched vulnerability that could allow a bypass of the Secure Boot mechanism in UEFI systems. ESET disclosed details of a now-patched vulnerability, tracked as CVE-2024-7344 (CVSS score: 6.7), that could allow a bypass of the Secure Boot mechanism in UEFI systems. SANFONG Inc., Wasay Software Technology Inc.,

Security 220

Security Manufacturing Education IT 220

Security Affairs

OCTOBER 8, 2024

” The flaw was reported by cybersecurity researchers Seth Jenkins from Google Project Zero and Conghui Wang from Amnesty International Security Lab. Please contact your device manufacturer for more information on the patch status about specific devices.”

Manufacturing 300

Manufacturing Cybersecurity IT Security 300

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M GENERAL BYTES is the world’s largest Bitcoin, Blockchain, and Cryptocurrency ATM manufacturer.

Manufacturing 246

Manufacturing Passwords Blockchain Cloud 246

Security Affairs

APRIL 5, 2023

A series of vulnerabilities in multiple smart devices manufactured by Nexx can be exploited to remotely open garage doors, and take control of alarms and plugs. Below is a video demo published by the researcher that shows how to exploit the flaw CVE-2023–1748 to obtain users’ info.

Manufacturing 246

Manufacturing Cybersecurity Education Authentication 246

Security Affairs

DECEMBER 16, 2021

of all systems targeted by the PseudoManuscrypt malware are part of industrial control systems (ICS) used by organizations in multiple industries, including Engineering, Building Automation, Energy, Manufacturing, Construction, Utilities, and Water Management. The experts revealed that at least 7.2% Pierluigi Paganini.

Energy and Utilities 347

Energy and Utilities Manufacturing Archiving Authentication 347

Security Affairs

FEBRUARY 18, 2020

Peripheral devices with unsigned firmware can expose Windows and Linux machines to hack, warn experts from firmware security firm Eclypsium. “The problem is that peripheral devices often lack the same security best practices that we take for granted in operating systems and in other more visible components, like the UEFI or BIOS.”

Authentication 363

Authentication Manufacturing Security Ransomware 363

Security Affairs

APRIL 11, 2021

The fight to the Joker malware (aka Bread) begun in September 2019 when security experts at Google removed from the official Play Store 24 apps because they were infected with a new spyware tracked as “ the Joker. ”. the official app store from the Huawei Android device manufacturer.” ” reads the post published by Dr. Web.

Manufacturing 363

Manufacturing Access Security IT 363

The Last Watchdog

SEPTEMBER 5, 2023

Related: The need for supply chain security This is to be expected. I had an eye-opening conversation about all of this with Steve Hanna , distinguished engineer at Infineon Technologies , a global semiconductor manufacturer based in Neubiberg, Germany. other European nations and Singapore soon began moving in this direction, as well.

IoT 220

IoT Security Manufacturing Cybersecurity 220

Security Affairs

MAY 2, 2021

A security duo has demonstrated how to hack a Tesla Model X’s and open the doors using a DJI Mavic 2 drone equipped with a WIFI dongle. Automotive manufacturers can scale up their software testing and remediation pipelines by orders of magnitude by using KunnaEmu. The researchers Kunnamon, Inc.’s concluded Dr. Weinmann.

Manufacturing 318

Manufacturing Security Cloud IT 318

Security Affairs

FEBRUARY 15, 2020

Security experts have discovered multiple flaws, dubbed SweynTooth, in the Bluetooth Low Energy (BLE) implementations of major system-on-a-chip (SoC) vendors. We envision substantial amendments to the BLE stack certification to avoid SweynTooth style security flaws. The group was composed of researchers Matheus E. .

IoT 354

IoT Security Manufacturing Communications 354

Security Affairs

JUNE 18, 2022

The RSOCKS was composed of millions of compromised computers and other electronic devices around the world, including industrial control systems, time clocks, routers, audio/video streaming devices, and smart garage door openers. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Computer and Electronics 311

Computer and Electronics Access Manufacturing Sales 311

Krebs on Security

APRIL 26, 2019

A peer-to-peer (P2P) communications technology built into millions of security cameras and other consumer electronics includes several critical security flaws that expose the devices to eavesdropping, credential theft and remote compromise, new research has found. A Webcam made by HiChip that includes the iLnkP2P software.

IoT 279

IoT Manufacturing Passwords Computer and Electronics 279