Vulnerabilities

QNAP’s Buggy Security Fix Causes Chaos
Richi Jennings | | automatic updates, data storage, firmware, firmware patch, firmware security, firmware update, Firmware Updates, hard disk drive, hard drive, NAS, os security updates, QNAP, QTS, RAID, Release Management, SB Blogwatch, security update, storage
RAID FAIL: NAS Maker does a CrowdStrike—cleanup on /dev/dsk/c1t2d3s4 please ...
Security Boulevard

RF Fortune Telling: Frequency Hopping Predictability
In the world of wireless communications, security vulnerabilities in implemented protocols canremain hidden behind layers of complexity. What appears secure due to the intricate nature ofRF communications may harbor fundamental weaknesses. Let’s ...

In a Growing Threat Landscape, Companies Must do Three Things to Get Serious About Cybersecurity
Several macro-trends – such as growing digital transformation, rising hybrid work and, especially, booming AI adoption – have created an increasingly sophisticated threat landscape ...
Security Boulevard

Here’s Yet Another D-Link RCE That Won’t be Fixed
Richi Jennings | | D-Link, D-Link Corporation, D-Link vulnerability, D-Link zero day, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things cyber security, iot, SB Blogwatch
D-Licious: Stubborn network device maker digs in heels and tells you to buy new gear ...
Security Boulevard

Microsoft Veeps Ignite Fire Under CrowdStrike
Richi Jennings | | CrowdStrike, CrowdStrike Falcon, CrowdStrike incident;, crowdstrike updates, David Weston, ignite, Microsoft, Microsoft security, Microsoft Virus Initiative, Microsoft Windows, Quick Machine Recovery, rust, Safe Deployment Practices, SB Blogwatch, Windows, Windows security
BSODs begone! Redmond business leaders line up to say what’s new in Windows security ...
Security Boulevard

EPA IG Office: ‘High-Risk’ Security Flaws in Hundreds of Water Systems
Jeffrey Burt | | cyber attack on critical infrastructure, EPA, public water systems, Vulnerabilities
The watchdog for the EPA found that, of 1,062 U.S. drinking water systems it assessed, 97 had "critical" or "high-risk" security flaws and another 211 had less dangerous vulnerabilities, risking threats from ...
Security Boulevard

Zero-Day Exploits Surge in 2023, Cisco, Fortinet Vulnerabilities Targeted
Nathan Eddy | | 0-day, cisa, cisco, Citrix, cyber threat actors, five eyes, Fortinet, SBD, vulnerability, zero-day
A report from the Five Eyes cybersecurity alliance, released by the CISA, highlights the majority of the most exploited vulnerabilities last year were initially zero-day flaws, a significant increase compared to 2022 ...
Security Boulevard

NIST Clears Backlog of Known Security Flaws but Not All Vulnerabilities
NIST, the embattled agency that analyzes security vulnerabilities, has cleared the backlog of known CVEs that hadn't been processed but needs more time to clear the entire backlog of unanalyzed flaws ...
Security Boulevard

These 20 D-Link Devices Have Critical RCE Bug — but NO Patch NEVER
Richi Jennings | | CVE-2024-10914, D-Link, D-Link Corporation, D-Link NAS Devices, D-Link vulnerability, D-Link zero day, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things cyber security, iot, NAS, network storage device, SB Blogwatch
‘Bobby’ flaw flagged WONTFIX: Company doesn’t make storage devices now; has zero interest in fixing this catastrophic vulnerability ...
Security Boulevard

Skeletons in the Closet: Legacy Software, Novel Exploits
The Praetorian team recently discovered a new vulnerability in Ivanti Endpoint Manager (EPM) which serves as a reminder to be aware of legacy systems - patch regularly and test often. The post ...