firmware

QNAP’s Buggy Security Fix Causes Chaos
Richi Jennings | | automatic updates, data storage, firmware, firmware patch, firmware security, firmware update, Firmware Updates, hard disk drive, hard drive, NAS, os security updates, QNAP, QTS, RAID, Release Management, SB Blogwatch, security update, storage
RAID FAIL: NAS Maker does a CrowdStrike—cleanup on /dev/dsk/c1t2d3s4 please ...
Security Boulevard
Maintaining the Security of CPS & IoT Systems
John Gallagher | | Blog, Compliance, cyber, firmware, iot, remediation, service assurance, Vulnerabilities
(Part 2 of our 3 part 2024 Summer IoT Security Series)Once a new CPS/IoT system is deployed, secured, and delivering the business value you intended it to, it’s time to focus on ...
CPS & IoT Security Starts at Deployment
(Part 1 of our 3 part 2024 Summer IoT Security Series) The starting point for many cyber-physical systems (IoT/OT/ICS) having security vulnerabilities is in how they are setup and managed by either ...

ASUS Router User? Patch ASAP!
Richi Jennings | | Asus, Attacking Routers, CVE-2024-3079, CVE-2024-3080, CVE-2024-3912, firmware, firmware attacks, firmware patch, firmware security, firmware update, Firmware Updates, Firmware Vulnerabilities, firmware vulnerability, flawed routers, IoT firmware, Malicious Firmware Updates, router, router compromise, router exploit, router hacking, router hijacking, router malware, router security, router vulnerabilities, router vulnerability, SB Blogwatch
Or junk it if EOL: Two nasty vulnerabilities need an update—pronto ...
Security Boulevard
IoT Security Means Remediation Not Mitigation
A topic that I recently got asked about was vulnerability mitigation for IoT systems, which shows that even within the security community there is still a belief that mitigation equals threat resolution. ...

‘Pumpkin Eclipse’ — 600,000+ Rural ISP Routers Bricked Beyond Repair
Richi Jennings | | ActionTec, Attacking Routers, cable modem, Chalubo, firmware, firmware attacks, firmware patch, firmware security, firmware update, flawed routers, Modem, Pumpkin Eclipse, router, router botnet, router compromise, router exploit, router hacking, router hijacking, router security, router vulnerabilities, router vulnerability, Sagemcom, SB Blogwatch, Windstream
Daft name, serious risk: Kit from ActionTec and Sagemcom remotely ruined and required replacement ...
Security Boulevard
RSAC 2024 Day 2: IoT Security Questions (and Answers)
RSA Conference delivers in terms of interesting dialogues with other cybersecurity professionals, and this year while there is not much on the conference agenda related to IoT security there is a lot ...
Urgency on Password Management
As a security professional I’d like you to consider the following scenario. You’re constantly adding new laptops to your organization, devices that connect to your corporate networks and will hold and transit ...
The Coming End of Biometrics Hastens AI-Driven Security
Until recently I thought we had a lot of time ahead of us to be secure in using biometrics to authenticate who I am and what I should have access to. But ...
Confessions on MFA and Security Best Practices
The last couple weeks have brought a few discussions on the topic of multifactor authentication or MFA (sometimes also referred to as 2FA or two factor authentication). These discussions have been driven ...