Security Affairs

MARCH 30, 2023

Popular voice and video conferencing software 3CX was the victim of a supply chain attack, SentinelOne researchers reported. As of Mar 22, 2023, SentinelOne observed a spike in behavioral detections of the 3CXDesktopApp, which is a popular voice and video conferencing software product. “Unfortunately the rumors are true.

File names 246

File names Manufacturing Libraries Cybersecurity 246

Data Breach Today

MARCH 28, 2025

Hackers Can Skip Login Protections to Access the 'choco tei' Camera An industrial camera common to Japanese manufacturer production lines has unpatched vulnerabilities allowing hackers to secretly access live footage or stop it from recording.

Manufacturing 130

Manufacturing Access Security IT 130

Data Breach Today

JANUARY 24, 2024

federal networks after a government watchdog caught the government's main acquisition arm purchasing unauthorized, Chinese-manufactured video conference cameras. Experts Warn Against Increasing Federal Reliance on Chinese Technology Experts are raising fresh concerns about the "significant risk" for Chinese espionage against U.S.

Manufacturing 301

Manufacturing Security Government Risk 301

The Last Watchdog

DECEMBER 3, 2023

Related: Big data can foster improved healthcare Within that, video represents over 80 percent of the traffic that flows through this global network which is growing rapidly at about 25 percent per year. A tremendous amount of video traffic is being managed by IT departments.

Energy and Utilities 196

Energy and Utilities Manufacturing Marketing Military 196

Security Affairs

JANUARY 2, 2021

The Federal Bureau Investigation (FBI) is warning owners of smart home devices with voice and video capabilities of ‘swatting’ attacks. The FBI has recently issued an alert to warn owners of smart home devices with voice and video capabilities of so-called “swatting” attacks. team to a specific location.

Passwords 361

Passwords Manufacturing Authentication Access 361

Security Affairs

JULY 31, 2022

The issue affects Dahua’s implementation of the Open Network Video Interface Forum ( ONVIF ). The following versions of Dahua video products, are affected : Dahua ASI7XXX: Versions prior to v1.000.0000009.0.R.220620 The CVE-2022-30563 vulnerability impacting Dahua IP Camera can allow attackers to seize control of IP cameras.

Authentication 363

Authentication Manufacturing Security Access 363

Security Affairs

OCTOBER 19, 2020

” The videos show people of varying ages in compromising positions, in some cases undressed. Most of the videos appear to belong to people from Singapore, other private footages come from people living in Thailand, South Korea, and Canada. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

IoT 363

IoT Paper Access Manufacturing 363

Security Affairs

SEPTEMBER 30, 2023

the fashion giant Moncler , the Swissport , NCR , and Western Digital.

Ransomware 347

Ransomware Manufacturing Risk IT 347

Security Affairs

MARCH 23, 2020

Experts observed multiple botnets exploiting zero-day vulnerabilities in DVRs for surveillance systems manufactured by Taiwan-based LILIN. Botnet operators are exploiting several zero-day vulnerabilities in digital video recorders (DVRs) for surveillance systems manufactured by Taiwan-based LILIN-.

Manufacturing 348

Manufacturing Passwords Access Security 348

Security Affairs

AUGUST 23, 2021

Razer is a popular manufacturer of computer accessories, including gaming mouses and keyboards. Razer is a very popular computer peripherals manufacturer that designs, develops, and sells consumer electronics, financial services, and gaming hardware, including gaming mouses and keyboards.

Computer and Electronics 356

Computer and Electronics Manufacturing Financial Services Access 356

Security Affairs

DECEMBER 14, 2022

After looking at 28 of the most popular manufacturers, our research team found 3.5 What is more, the overwhelming majority of internet-facing cameras are manufactured by Chinese companies. Most of the public-facing cameras we discovered are manufactured by the Chinese company Hikvision: the Cybernews research team found over 3.37

Passwords 363

Passwords Manufacturing Authentication Government 363

Security Affairs

APRIL 29, 2019

gaming , video conferencing). “As As with many other airlines, some of our premium seats have in-flight entertainment systems that came with cameras installed by the manufacturer.” The cameras are a standard feature that manufacturers of the system included for possible future purposes such as video conferencing.”

Privacy 246

Privacy Manufacturing Security IT 246

Security Affairs

OCTOBER 1, 2023

The Alphv ransomware group has been very active in this period, recently it claimed to have hacked Clarion , the global manufacturer of audio and video equipment for cars and other vehicles, and the hotel chain Motel One. .” reads the message published by the ALPHV gang on its leak site.

Ransomware 342

Ransomware Manufacturing Privacy Security 342

Security Affairs

AUGUST 13, 2022

In a video shared by the group on Telegram, the group claimed to have stolen the personal information of the Lockheed Martin employees, including names, email addresses, phone numbers, and pictures. Let them realize what they create and what they contribute to.” Tanslated with Google).

Manufacturing 251

Manufacturing Government IT Security 251

Security Affairs

JULY 21, 2020

Xuanwu Lab also investigated 34 fast-charging chip manufacturers and discovered that at least 18 chip manufacturers produce chips with the function of updating firmware after finished products. ” Researchers also published a video PoC of the BadPower attack. Attackers could exploit this function to conduct BadPower attack.

Manufacturing 326

Manufacturing Security Marketing IT 326

Security Affairs

NOVEMBER 19, 2019

The vulnerabilities are collectively tracked as CVE-2019-2234, attackers could exploit them to conduct several activities, including recording videos, taking photos, recording voice calls, tracking the user’s location. The vulnerabilities could be exploited by threat actors even if the phone is locked and the screen is turned off. .

Manufacturing 222

Manufacturing Metadata Security awareness IoT 222

Security Affairs

JULY 19, 2021

The experts demonstrated how to bypass the security feature in a video PoC: Bypassing Windows Hello Without Masks or Plastic Surgery. Enhanced Sign-in Security is a new security feature in Windows which requires specialized hardware, drivers, and firmware that are pre-installed on the system by device manufacturers in the factory.

Manufacturing 314

Manufacturing Authentication Security Access 314

Security Affairs

OCTOBER 8, 2024

Please contact your device manufacturer for more information on the patch status about specific devices.” . “Patches for the issue affecting FASTRPC driver have been made available to OEMs together with a strong recommendation to deploy the update on affected devices as soon as possible.

Manufacturing 296

Manufacturing Cybersecurity IT Security 296

Security Affairs

MAY 26, 2020

The permissions granted to the app could allow spying on the user by accessing the camera and microphone, obtaining the device’s location, reading the SMSs, capturing login credentials (including 2FA codes via SMS), accessing private photos and videos, accessing contacts and call logs, and also making calls and recording the victim’s conversations.

Access 323

Access Manufacturing Phishing Security 323

Security Affairs

AUGUST 9, 2024

MediaTek, who manufactures Wi-Fi SoC for Sonos speaker, released a security advisory in March 2024 (CVE-2024-20018). ” Below is a video PoC of the attack exploring the flaw to eavesdrop on users. . “A low-privileged, close-proximity attacker could exploit this vulnerability to remotely execute arbitrary code.”

Manufacturing 315

Manufacturing Paper Security IT 315

Security Affairs

FEBRUARY 9, 2020

Google mistakenly shared private videos of some users with others in 2019. IoT devices at major Manufacturers infected with crypto-miner. Using 99 mobile phones to create a fake traffic jam in Google Maps. Dropbox paid more than $1 Million via its bug bounty program. Microsoft detects 77,000 active web shells on a daily basis.

Security 311

Security Ransomware IoT Manufacturing 311

Security Affairs

DECEMBER 21, 2018

We believe this will only grow in 2019 and, because this will increase awareness of threats with IoT users, it will, in turn, accelerate the regulation process, and put more pressure on manufacturers to raise the security bar for their products. For certain, IoT device manufacturers cannot leave IoT cyber security behind much longer.

IoT 278

IoT Security Manufacturing Privacy 278

Security Affairs

JUNE 12, 2022

The flaws impact products manufactured by LenelS2, a provider of advanced physical security solutions (i.e. access control, video surveillance and mobile credentialing) owned by HVAC giant Carrier. The experts focused on Carrier’s LenelS2 access control panels, manufactured by HID Mercury. ” reads the advisory.

Access 272

Access Authentication Manufacturing Cybersecurity 272

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M GENERAL BYTES is the world’s largest Bitcoin, Blockchain, and Cryptocurrency ATM manufacturer. Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M

Manufacturing 246

Manufacturing Passwords Blockchain Cloud 246

Security Affairs

DECEMBER 16, 2021

of all systems targeted by the PseudoManuscrypt malware are part of industrial control systems (ICS) used by organizations in multiple industries, including Engineering, Building Automation, Energy, Manufacturing, Construction, Utilities, and Water Management. The experts revealed that at least 7.2%

Energy and Utilities 345

Energy and Utilities Manufacturing Archiving Authentication 345

Security Affairs

APRIL 5, 2023

A series of vulnerabilities in multiple smart devices manufactured by Nexx can be exploited to remotely open garage doors, and take control of alarms and plugs. Below is a video demo published by the researcher that shows how to exploit the flaw CVE-2023–1748 to obtain users’ info.

Manufacturing 246

Manufacturing Cybersecurity Education Authentication 246

Security Affairs

NOVEMBER 10, 2023

The Alphv ransomware group has been very active in this period, recently it claimed to have hacked Clarion , the global manufacturer of audio and video equipment for cars and other vehicles, and the hotel chain Motel One. .” reads the message published by the ALPHV gang on its leak site.

Data breaches 338

Data breaches Ransomware Insurance Manufacturing 338

Security Affairs

APRIL 11, 2021

the official app store from the Huawei Android device manufacturer.” 594 f1b49a444f554bb942fd8f5a9ff2a212d8db6247 Camera MX – Photo Video Camera com.sdkfj.uhbnji.dsfeff hxxps://cameramx-photovideocamera.oss-cn-wulanchabu.aliyuncs.com/ Android.Joker.594 ” reads the post published by Dr. Web.

Manufacturing 363

Manufacturing Access Security IT 363

Krebs on Security

OCTOBER 28, 2020

Last week, a Russian journalist published a video on Youtube claiming to be an interview with the cybercriminals behind the REvil/Sodinokibi ransomware strain , which is the handiwork of a particularly aggressive criminal group that’s been behind some of the biggest and most costly ransom attacks in recent years.

Security 360

Security Ransomware Agriculture Cybersecurity 360

Data Breach Today

DECEMBER 19, 2019

Army ordered that the use of drones made by Chinese manufacturer DJI be discontinued, citing security concerns. Now, a second classified memo used to support that decision has been released, revealing serious concerns about how cyberspies could intercept video and other encrypted data.

Manufacturing 147

Manufacturing Encryption Security 147

Security Affairs

FEBRUARY 18, 2020

Experts at firmware security firm Eclypsium have discovered that many peripheral device manufacturers have not implemented security checks to prevent the installation of firmware from an untrusted source. The experts also published a video PoC of an attack on a network interface, a Broadcom chipset, that runs an unsigned firmware. “A

Authentication 362

Authentication Manufacturing Security Ransomware 362

Security Affairs

JANUARY 29, 2023

Copycat Criminals mimicking Lockbit gang in northern Europe Sandworm APT targets Ukraine with new SwiftSlicer wiper ISC fixed high-severity flaws in DNS software suite BIND Patch management is crucial to protect Exchange servers, Microsoft warns Hacker accused of having stolen personal data of all Austrians and more CVE-2023-23560 flaw exposes 100 (..)

Security 246

Security Data breaches Military Ransomware 246

Security Affairs

DECEMBER 27, 2023

An attacker could employ generative AI to forge realistic content, including images, videos, and audio, which can sway public opinion in myriad ways. Fabricated audio and videos concocted swiftly and disseminated ahead of elections could jeopardize a political party or candidate’s reputation.

Artificial Intelligence 345

Artificial Intelligence Government Manufacturing IT 345

Krebs on Security

APRIL 26, 2019

iLnkP2p is bundled with millions of Internet of Things (IoT) devices, including security cameras and Webcams, baby monitors, smart doorbells, and digital video recorders. “Software-based remediation is unlikely due to the infeasibility of changing device UIDs, which are permanently assigned during the manufacturing process.

IoT 279

IoT Manufacturing Passwords Computer and Electronics 279

Security Affairs

NOVEMBER 27, 2018

The devices are manufactured by the Chinese company called Zengge and could be controlled using both Android and iOS apps. Below a video PoC created by the experts. Security researchers with Checkmarx developed two mobile applications that exploit smart bulbs features for data exfiltration. ” continues the experts.

Communications 280

Communications Manufacturing Security IT 280

Security Affairs

MAY 2, 2021

The duo called the hack TBONE and presented it at the CanSecWest 2021 Conference , below the video of the presentation: Weinmann and Schmotzle explained that the ConnMan is also widely used in infotainment systems of other carmakers, for this reason they engaged German CERT and other actors of the automotive industry. “We

Manufacturing 314

Manufacturing Security Cloud IT 314

Security Affairs

OCTOBER 23, 2019

The Japanese hotel chain HIS Group admitted that its in-room robots were vulnerable and could allow hackers to remotely view video footage from the devices. Now the HIS Group admitted that the in-room robots were vulnerable to hack and could allow remote attackers to view video footage from the devices. set to autorun.

Manufacturing 182

Manufacturing Access Risk Security 182