Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally – Tempemail

Multiple security weaknesses have been disclosed in MediaTek system-on-chips (SoCs) that could have enabled a threat actor to elevate privileges and execute arbitrary code in the firmware of the audio processor, effectively allowing the attackers to carry out a “massive eavesdrop campaign” without the users’ knowledge. The discovery of the Continue Reading

Chinese Authorities Arrest Hackers Behind Mozi IoT Botnet Attacks – Tempemail

The operators of the Mozi IoT botnet have been taken into custody by Chinese law enforcement authorities, nearly two years after the malware emerged on the threat landscape in September 2019. News of the arrest, which originally happened in June, was disclosed by researchers from Netlab, the network research division Continue Reading

Mozi IoT Botnet Now Also Targets Netgear, Huawei, and ZTE Network Gateways – Tempemail

Mozi, a peer-to-peer (P2P) botnet known to target IoT devices, has gained new capabilities that allow it to achieve persistence on network gateways manufactured by Netgear, Huawei, and ZTE, according to new findings. “Network gateways are a particularly juicy target for adversaries because they are ideal as initial access points Continue Reading

Critical ThroughTek SDK Bug Could Let Attackers Spy On Millions of IoT Devices – Tempemail

A security vulnerability has been found affecting several versions of ThroughTek Kalay P2P Software Development Kit (SDK), which could be abused by a remote attacker to take control of an affected device and potentially lead to remote code execution. Tracked as CVE-2021-28372 (CVSS score: 9.6) and discovered by FireEye Mandiant Continue Reading

Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices – Tempemail

Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits (SDKs) accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors. The flaws, which affect Realtek SDK v2.x, Realtek “Jungle” SDK v3.0/v3.1/v3.2/v3.4.x/v3.4T/v3.4T-CT, and Realtek “Luna” SDK up Continue Reading

A Critical Random Number Generator Flaw Affects Billions of IoT Devices – Tempemail

A critical vulnerability has been disclosed in hardware random number generators used in billions of Internet of Things (IoT) devices whereby it fails to properly generate random numbers, thus undermining their security and putting them at risk of attacks. “It turns out that these ‘randomly’ chosen numbers aren’t always as Continue Reading

Microsoft Finds ‘BadAlloc’ Flaws Affecting Wide-Range of IoT and OT Devices – Tempemail

Microsoft researchers on Thursday disclosed two dozen vulnerabilities affecting a wide range of Internet of Things (IoT) and Operational Technology (OT) devices used in industrial, medical, and enterprise networks that could be abused by adversaries to execute arbitrary code and even cause critical systems to crash. “These remote code execution Continue Reading

New NAME:WRECK Vulnerabilities Impact Nearly 100 Million IoT Devices – Tempemail

Security researchers have uncovered nine vulnerabilities affecting four TCP/IP stacks impacting more than 100 million consumer and enterprise devices that could be exploited by an attacker to take control of a vulnerable system. Dubbed “NAME:WRECK” by Forescout and JSOF, the flaws are the latest in series of studies undertaken as Continue Reading

New Critical Flaws in Treck TCP/IP Stack Affect Millions of IoT Devices – Tempemail

The US Cybersecurity Infrastructure and Security Agency (CISA) has warned of critical vulnerabilities in a low-level TCP/IP software library developed by Treck that, if weaponized, could allow remote attackers to run arbitrary commands and mount denial-of-service (DoS) attacks. The four flaws affect Treck TCP/IP stack version 6.0.1.67 and earlier and Continue Reading