1(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[8329],{15179:function(e,t,n){"use strict";n.d(t,{s:function(){return g}});var a=n(92809),o=n(65988),s=(n(67294),n(94184)),r=n.n(s),i=n(70149),c=n(87956),l=n(85893);function u(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function h(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?u(Object(n),!0).forEach((function(t){(0,a.Z)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):u(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var d=(0,c.zN)({h3:function(e){var t=e.children;return(0,l.jsx)("h3",{className:"blog-heading",children:t})},h4:function(e){var t=e.children;return(0,l.jsx)("h4",{className:"mt-0",children:t})},a:i.Z}),g=function(e){var t=e.prefix,n=e.uri,a=e.src,o=e.alt,s=e.style,c=e.short,u=e.auto;return(0,l.jsx)(i.Y,{prefix:t,uri:n,children:(0,l.jsx)("img",{src:a,alt:o,style:s,className:r()("blog-top-image w-100",{short:c,auto:u})})})};t.Z=function(e){var t=e.prefix,n=e.post;return(0,l.jsx)(d,h(h({},n),{},{children:function(e){var n=e.tree,a=e.logoImg,s=e.attributes,r=s.uri,i=s.title,c=s.author,u=s.auto;return(0,l.jsxs)("div",{className:"jsx-1565861696 blog-list-item py-4",children:[(0,l.jsx)("h4",{className:"jsx-1565861696 mb-0",children:i}),(0,l.jsx)("h6",{className:"jsx-1565861696 font-sm my-4 py-2",children:c}),(0,l.jsx)(g,h(h({prefix:t,uri:r},a),{},{short:!0,auto:u})),n,(0,l.jsx)(o.default,{id:"1565861696",children:[".blog-list-item .btn{float:none !important;}"]})]})}}))}},6573:function(e,t,n){"use strict";var a=n(92809),o=n(79056),s=n(65988),r=(n(67294),n(94184)),i=n.n(r),c=n(85893);function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function u(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){(0,a.Z)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}t.Z=function(e){var t=e.src,n=e.title,r=function(e){var t,n="",s="";try{var r=e.split(";").map((function(e){return e.trim()})).reduce((function(e,t){var n=t.split(":"),s=(0,o.Z)(n,2),r=s[0],i=s[1];return u(u({},e),{},(0,a.Z)({},r.trim(),i.trim()))}),{});n=r.class,t=r.alt,s=r.caption}catch(i){t=e}return{alt:t,className:n,caption:s}}(void 0===n?"":n),l=r.alt,h=void 0===l?"Figure":l,d=r.className,g=void 0===d?"":d,m=r.caption,p=void 0===m?"":m,f=g.startsWith("float")?"":g,w=g.startsWith("float")?g:"";return(0,c.jsxs)("span",{className:"jsx-214360964 "+(i()("blog-figure",f)||""),children:[(0,c.jsx)("img",{src:t,alt:h,className:"jsx-214360964 "+(w||"")}),p?(0,c.jsx)("span",{style:{display:"block"},className:"jsx-214360964",children:p}):null,(0,c.jsx)(s.default,{id:"214360964",children:[".blog-figure.text-center{display:block;}",".blog-figure.full-width img{padding:0;max-width:100%;}",".blog-figure img{max-width:50%;padding:1rem;}",".blog-figure img.float-left{padding:1rem 2rem 1rem 0;}",".blog-figure img.float-right{padding:1rem 0 1rem 2rem;}","@media (max-width:768px){.blog-figure img{float:none !important;max-width:100%;}}"]})]})}},70149:function(e,t,n){"use strict";n.d(t,{Y:function(){return i},Z:function(){return c}});var a=n(79056),o=(n(67294),n(41664)),s=n(38419),r=n(85893);var i=function(e){var t=e.prefix,n=e.uri,a=e.children,i=e.button;if((n=Array.isArray(n)?n[0]:n).startsWith("//")){var c=i?"btn color-dark btn-bg-transparent btn-sm blog-btn font-middle my-2":"";return(0,r.jsx)("a",{href:n,className:c,children:a})}var l="".concat(t,"/").concat(n),u="".concat(t,"/[page]");return i?(0,r.jsx)(s.Qj,{href:u,as:l,color:"dark",bgColor:"transparent",size:"sm",className:"blog-btn font-middle my-2",children:a}):(0,r.jsx)(o.default,{href:u,as:l,children:(0,r.jsx)("a",{children:a})})};function c(e){var t=e.children,n=e.href,o=e.title;if(function(e){return e.startsWith("/blog/")}(n)){var c=/\/blog\/(.*)/.exec(n)||[],l=(0,a.Z)(c,2)[1];return(0,r.jsx)(i,{button:!0,prefix:"/blog",uri:l,children:t})}if(function(e){return e.startsWith("/newsletter/")}(n)){var u=/\/newsletter\/(.*)/.exec(n)||[],h=(0,a.Z)(u,2)[1];return(0,r.jsx)(i,{button:!0,prefix:"/newsletter",uri:h,children:t})}return function(e){return"Read more"===e||"\u7d9a\u304d\u3092\u8aad\u3080"===e}(o)?function(e){return e.startsWith("/")&&!e.startsWith("//")&&!e.endsWith(".pdf")}(n)?(0,r.jsx)(s.Qj,{href:n,color:"dark",bgColor:"transparent",children:(0,r.jsx)("b",{children:t})}):(0,r.jsx)(s.ZP,{tag:"a",className:"mt-2 ml-2 float-right",href:n,children:t}):(0,r.jsx)("a",{href:n,className:"color-pink",children:t})}},3836:function(e,t,n){"use strict";var a=n(65988),o=(n(67294),n(94184)),s=n.n(o),r=n(10267),i=n(51252),c=n(32784),l=n(85893),u=function(e,t){var n={};return e&&(n.backgroundImage="url('/static/images/bg/hero-bg-".concat(e,".jpg')")),t.sm&&(n.minHeight="318px"),t.md&&(n.minHeight="424px"),t.lg&&(n.minHeight="716px"),n};t.Z=function(e){var t=e.children,n=e.className,o=e.darkLeft,h=void 0!==o&&o,d=e.noTitle,g=void 0!==d&&d,m=e.md,p=void 0!==m&&m,f=e.sm,w=void 0!==f&&f,y=e.lg,b=void 0!==y&&y;return(0,l.jsxs)(c.Z,{darkLeft:h,dark:!h,className:s()("hero","bg-".concat(n)),style:u(n,{sm:w,md:p,lg:b}),children:[(0,l.jsx)(r.Z,{children:(0,l.jsxs)(i.Z,{children:[!g&&(0,l.jsx)("h1",{className:"jsx-2171983721 hero-title h2 pt-5 mt-5",children:t}),g&&t]})}),(0,l.jsx)(a.default,{id:"2171983721",children:[".bg-karamba .hero-title{font-size:56px;margin:0;min-width:auto;}",".bg-karamba-home .hero-title{font-size:72px;margin:0;min-width:auto;}",".section.hero{min-height:500px;padding:0;background-repeat:no-repeat;background-size:cover;background-position:center;}
1","@media (min-width:768px){.section.hero{height:0;}.bg-karamba .hero-title{min-width:auto;}}","@media (min-width:1200px){.bg-karamba .hero-title{min-width:960px;}}",".section.hero>.container{height:100%;-webkit-box-pack:center;-webkit-justify-content:center;-ms-flex-pack:center;justify-content:center;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;}",".hero-title{display:inline-block;margin:40px 0 20px;line-height:1.1;text-shadow:0 0 13px rgba(0,0,0,0.7);color:#fff;}","@media (max-width:992px){.bg-karamba-home .hero-title{font-size:56px;}.bg-karamba .hero-title{font-size:48px;}}","@media (max-width:768px){.section.hero{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;}.section.hero>.container{width:100%;text-align:center;}.hero-title{text-align:center;width:100%;padding-top:0 !important;margin-top:0 !important;}.bg-karamba-home .hero-title{font-size:42px;}.bg-karamba .hero-title{font-size:36px;}}","@media (max-width:576px){.bg-karamba-home .hero-title{font-size:36px;}.bg-karamba .hero-title{font-size:32px;}.section.hero{min-height:400px !important;}}"]})]})}},81251:function(e,t,n){"use strict";n(67294);var a=n(16267),o=n(85893),s=[{path:"/media",label:"Karamba in the News"},{path:"/press",label:"Press"},{path:"/blog",label:"Blog"}];t.Z=function(){return(0,o.jsx)(a.Z,{menuItems:s})}},16267:function(e,t,n){"use strict";var a=n(97131),o=n(65988),s=(n(67294),n(10861)),r=n(94184),i=n.n(r),c=n(41664),l=n(11163),u=n(10267),h=n(51252),d=n(32784),g=n(59460),m=n(85893);function p(e){var t=e.router.asPath,n=e.item,a=e.light,o=n.path,r=n.label,l=n.exact,u=void 0!==l&&l?t===o:t.startsWith(o),h=(0,s.Qc)(o).hash,d=h&&h.slice(1);return(0,m.jsx)(g.Z,{id:d,children:function(e,t){var n=e?t:u;return(0,m.jsx)("li",{className:i()("sub-menu-item",{active:n,light:a}),children:(0,m.jsx)(c.default,{href:o,children:(0,m.jsx)("a",{children:r})})})}})}p=(0,l.withRouter)(p);t.Z=function(e){var t=e.menuItems,n=e.light,s=void 0!==n&&n,r=t.reduce((function(e,t,n){return[].concat((0,a.Z)(e),[(0,m.jsx)(p,{item:t,light:s},"smi-".concat(n)),(0,m.jsx)("li",{className:i()("sub-menu-separator",{light:s})},"smi-sep-".concat(n))])}),[]);return(0,m.jsxs)(d.Z,{dark:!s,className:i()("sub-menu-section py-0 d-none d-lg-block",{light:s}),children:[(0,m.jsx)(u.Z,{children:(0,m.jsx)(h.Z,{children:(0,m.jsx)("ul",{className:"jsx-1330550498 sub-menu list-unstyled",children:r})})}),(0,m.jsx)(o.default,{id:"1330550498",children:[".sub-menu-section{position:-webkit-sticky;position:sticky;top:6rem;z-index:1001;}",".sub-menu{margin:0;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-wrap:wrap;-ms-flex-wrap:wrap;flex-wrap:wrap;-webkit-align-items:stretch;-webkit-box-align:stretch;-ms-flex-align:stretch;align-items:stretch;}",".sub-menu-item{margin:0.8rem 0;opacity:0.8;cursor:pointer;border-bottom:2px solid transparent;}",".sub-menu-item a{padding:0;color:#fff;border-bottom:2px solid transparent;line-height:1;-webkit-text-decoration:none !important;text-decoration:none !important;}
1",".sub-menu-item:hover,.sub-menu-item.active{border-bottom:2px solid #ed1f63;}",".sub-menu-separator{border-right:1px solid rgba(255,255,255,0.4);border-left:1px solid rgba(255,255,255,0.2);margin:1.3rem 1.5rem;}",".sub-menu-separator:last-child{display:none;}",".sub-menu-section.light{box-shadow:0 1px 10px -1px rgba(0,0,0,0.2);}",".sub-menu-item.light a{color:inherit;}",".sub-menu-item.light:hover,.sub-menu-item.light.active{border-bottom:2px solid transparent;font-weight:bold;}",".sub-menu-separator.light{border-color:#949696;}"]})]})}},32103:function(e,t,n){"use strict";var a=n(21186),o=n.n(a);t.Z=[o()(n(27809)),o()(n(31748)),o()(n(24473)),o()(n(93897)),o()(n(67447)),o()(n(82704)),o()(n(8706)),o()(n(4127)),o()(n(6454)),o()(n(25496)),o()(n(86952)),o()(n(74225)),o()(n(31302)),o()(n(70244)),o()(n(76302)),o()(n(82376)),o()(n(98634)),o()(n(11982)),o()(n(20616)),o()(n(97310)),o()(n(59598)),o()(n(18928)),o()(n(68502)),o()(n(9626)),o()(n(62727)),o()(n(66064)),o()(n(29372)),o()(n(91203)),o()(n(95279)),o()(n(87031))]},87031:function(e){!function(){"use strict";e.exports='---\nuri: 2019-06-21-this-week-in-cybersecurity\nlogo: /static/images/blog/cubes.jpg "cubes"\nauthor: Karamba Security\ntitle: "Hackers Penetrate NASA: The Top News in Product Cybersecurity for the Week of June 21"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge cybersecurity\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge cybersecurity\n\n---\n\n#### NASA Confirms They Were Hacked \u2013 Says Attackers Made Their Way in Through Server ([Forbes][1])\n\nAccording to NASA, hackers managed to exploit an unauthorized Raspberry Pi computer connected to the\nJPL servers and move laterally into the NASA network, eventually making it as far as the Deep Space\nNetwork (DSN) array of radio telescopes and numerous other JPL systems.\n\n#### New Echobot Malware is a Smorgasbord of Vulnerabilities ([ZDNet][2])\n\nIt seems like each month there\u2019s a new major botnet that hits the scene and Echobot is one of the\nmost dangerous, targeting everything from security cameras to DVRs, to WeMo devices.\n\n#### Linux Kernel Bug Knocks PCs, IoT Gadgets and More Offline ([Threat Post][3])\n\nNetflix researchers found the vulnerabilities, which the company said could be countered by limiting\nwrite buffers to the necessary level, closing misbehaving connections, and monitoring connection\nmemory consumption.\n\n#### The Top 5 Cybersecurity Mistakes CISOs Make ([Security Boulevard][4])\n\nBad intentions and a lack of hard work are rarely to blame. Without understanding the root causes of\ncorporate cybersecurity failures CISOs can miss the forest for the trees.\n\n#### US Internet Of Things Bill Advanced To Vote On House Floor ([National Law Review][5])\n\nThe bipartisan legislation aims to reduce the risk to critical government information technology\ninfrastructure from cyberattacks.\n\n---\n\n[Read more](/newsletter/2019-06-21-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://www.forbes.com/sites/daveywinder/2019/06/20/confirmed-nasa-has-been-hacked/?ss=cybersecurity#43a31cb4dc62\n[2]: https://www.zdnet.com/article/new-echobot-malware-is-a-smorgasbord-of-vulnerabilities/\n[3]: https://threatpost.com/linux-kernel-bug-pcs-iot-offline/145797/\n[4]:\n https://securityboulevard.com/2019/06/missing-the-forest-for-the-trees-top-5-ciso-pitfalls-in-cybersecurity/\n[5]: https://www.natlawreview.com/article/us-internet-things-bill-advanced-to-vote-house-floor\n'}()},95279:function(e){!function(){"use strict";e.exports='---\nuri: 2019-06-27-this-week-in-cybersecurity\nlogo: /static/images/blog/planet.jpg "planet"\nauthor: Karamba Security\ntitle:\n "New IoT Malware Bricks Thousands of Devices: The Top News in Product Cybersecurity for the Week\n of June 27"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge cybersecurity\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge cybersecurity\n\n---\n\n##### TP-Link Wi-Fi Extenders are Vulnerable to Attack ([HelpNetSecurity][1])\n\n![Blog Figure #6][6]\n\nSeveral TP-Link Wi-Fi extender devices sport a critical remote code execution vulnerability that\ncould allow attackers to take over the devices and command them with the same privileges as their\
1nlegitimate user.\n\n##### The Future of Road Transport - What We Will Drive, if We Still Drive at All ([European Commission][2])\n\n![Blog Figure #7][7]\n\nNew report asserts that massive changes are on the horizon in automation, connectivity,\ndecarbonization, and sharing.\n\n##### Botnets Shift From Windows Towards Linux and IoT Platforms ([Globaldots][3])\n\n![Blog Figure #8][8]\n\nNSFOCUS states that Botnets continue to use DDoS as their primary weapon to hit high-speed networks\nand that they have shifted from Windows platforms towards Linux and IoT platforms.\n\n##### New IoT Malware, Silex, is Bricking IoT Devices ([ZDNet][4])\n\n![Blog Figure #9][9]\n\nOver 2,000 devices were bricked in just a few hours, and the attacks are expected to worsen in the\ncoming days, according to the malware\u2019s creator.\n\n##### Mining Vulnerable to Cybersecurity risks ([Mining Review][5])\n\n![Blog Figure #10][10]\n\nStudy finds that out of 125 mining businesses, 87% reported that their processes to combat\ncybersecurity threats could be stronger, and 84% said more could be done to protect against data\nmishandling.\n\n---\n\n[Read more](/newsletter/2019-06-27-this-week-in-cybersecurity "Read more")\n\n[1]: https://www.helpnetsecurity.com/2019/06/18/vulnerable-tp-link-wi-fi-extenders/\n[2]: https://ec.europa.eu/jrc/en/news/future-road-transport-what-we-will-drive-if-we-still-drive-all\n[3]: https://www.globaldots.com/botnets-shift-from-windows-towards-linux-and-iot-platforms/\n[4]: https://www.zdnet.com/article/new-silex-malware-is-bricking-iot-devices-has-scary-plans/\n[5]: https://www.miningreview.com/base-metals/mining-companies-vulnerable-cybersecurity-risks/\n[6]: /static/images/blog/wifinlll.jpg "class:float-left; alt:home wifi"\n[7]: /static/images/blog/ecnll.jpg "class:float-left; alt:European Commission"\n[8]: /static/images/blog/botnetnl.jpg "class:float-left; alt:bot net"\n[9]: /static/images/blog/malwarebott.jpg "class:float-left; alt:malware bot"\n[10]: /static/images/blog/diamonds.jpg "class:float-left; alt:diamonds"\n'}()},91203:function(e){!function(){"use strict";e.exports='---\nuri: 2019-07-04-this-week-in-cybersecurity\nlogo: /static/images/blog/circuit.jpg "circuit"\nauthor: Karamba Security\ntitle:\n "New Autonomous Vehicle Security Guidelines: The Top News in Product Cybersecurity for the Week of\n July 4"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge cybersecurity\n---\n\nHappy 4th of July to all our readers in the United States! Here\'s a look at some of the top stories\nfrom this past week in the world of automotive, IoT, Industry 4.0, and Enterprise Edge cybersecurity\n\n---\n\n##### Control Flow Integrity is Specified as a Crucial Security Control for Automated Vehicles by Leading OEMs and Tier 1, in New Industry Publication ([Publication][10])\n\n![Blog Figure #11][11]\n\nControl flow integrity is among the component level security controls that can provide reliable\ncybersecurity for automated vehicles, according to a new series of guidelines from Intel. Compiled\nby 11 leaders in the automotive industry, including Audi, BMW, Daimler, and Volkswagen, the\nguidelines include a series of principles for autonomous vehicle safety.\n\n##### Vulnerability on Highly-Popular Platform Leaves Tens of Millions of Routers Open to Attack ([Dojo by Bullguard][1])\n\n![Blog Figure #2][2]\n\nTens of millions of routers that use the RDK (Reference Design Kit) platform are vulnerable and\nexpose entire networks to remote code execution attacks. In this post, the writer examines the\ndangers of attacks that target such IoT devices.\n\n##### Report Finds Series of Vulnerabilities Affecting Huawei Equipment ([Security Week][5])\n\n![Blog Figure #6][6]\n\nIoT security provider\u2019s [report][7] asserts that memory corruption vulnerabilities are the most\ndangerous in software and that Huawei devices have a \u201cstaggering number of unsafe and potentially\nexploitable code conditions. The report also states that half of Huawei\u2019s firmware images had one or\nmore potential backdoor, which along with other vulnerabilities, could help the Chinese government\u2019s\nespionage efforts.\n\n##### D-Link is Required to Boost Security for its Devices After FTC Complaint About Hacking Fears and Security Flaws ([C
1onsumer Reports][8])\n\n![Blog Figure #9][9]\n\nAfter the Federal Trade Commission issued a complaint that D-Link systems hasn\u2019t provided sufficient\nsecurity for its routers, webcams, and other IoT devices, the company will launch its own software\nsecurity program to answer these shortcomings. The FTC said that the \u201cpreventable security flaws\u201d\nmeant that for years hackers could access customer\u2019s live video and audio feeds.\n\n##### Bluetooth Attack Reveals Potential IoT Security Threat ([TechHQ][3])\n\n![Blog Figure #4][4]\n\nUnpatched, older Bluetooth devices can make an easy target for hackers looking to hijack IoT\ndevices. And with Bluetooth installed on countless IoT devices from connected automobiles to smart\nthermostats, hackers have no shortage of targets.\n\n---\n\n[Read more](/newsletter/2019-07-04-this-week-in-cybersecurity "Read more")\n\n[1]: https://dojo.bullguard.com/dojo-by-bullguard/blog/the-gateway-is-wide-open/\n[2]: /static/images/blog/rdk.jpg "class:float-left; alt:rdk logo"\n[3]: https://techhq.com/2019/05/bluetooth-attack-reveals-potential-iot-security-threat/\n[4]: /static/images/blog/bluetoothpic.jpg "class:float-left; alt:bluetooth"\n[5]: https://www.securityweek.com/many-potential-backdoors-found-huawei-equipment-study\n[6]: /static/images/blog/huawei.jpg "class:float-left; alt:blue picture"\n[7]: https://finitestate.io/wp-content/uploads/2019/06/Finite-State-SCA1-Final.pdf\n[8]: https://www.consumerreports.org/digital-security/d-link-to-boost-security-program/\n[9]: /static/images/blog/creports.jpg "class:float-left; alt:consumer reports"\n[10]:\n https://newsroom.intel.com/wp-content/uploads/sites/11/2019/07/Intel-Safety-First-for-Automated-Driving.pdf\n[11]: /static/images/blog/automatedcar.jpg "class:float-left; alt:car"\n'}()},29372:function(e){!function(){"use strict";e.exports='---\nuri: 2019-07-11-this-week-in-cybersecurity\nlogo: /static/images/blog/swirls.jpg "swirls"\nauthor: Karamba Security\ntitle:\n "Hackable Medical Machines on a Massive Scale: The Top News in Product Cybersecurity for the Week\n of July 12"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge cybersecurity.\n\n---\n\n##### Vulnerability Leaves Respiratory and Anesthesia Machines Open to Attacks, Researchers Find ([Tech Crunch][1])\n\n![Blog Figure #2][2]\n\nSecurity flaw could be exploited by hackers to maliciously tamper with the devices, and only\nrequires \u201clow skill level\u201d on the part of attackers, according to the US Department of Homeland\nSecurity.\n\n##### US Coast Guard Releases Cybersecurity Guidelines for Commercial Vessels Following Malware Scare ([Bleeping Computer][5])\n\n![Blog Figure #6][6]\n\nA malware attack on a deep water vessel in February affected the ship\u2019s entire network, highlighting\nthe danger of maritime cyber threats.\n\n##### New Ransomware Targets Enterprise and Consumer NAS Storage Devices ([GlobeNewswire][3])\n\n![Blog Figure #4][4]\n\nThese storage devices usually store critical files and backups \u2013 and have little or no antivirus\ninstalled on them - meaning they can be very lucrative for attackers who carry out a ransomware\nattack.\n\n##### Huawei Responds to Report of \u201cStaggering\u201d Security Flaws, Says Findings Don\u2019t Tell the Whole Story ([Press Release][7])\n\n![Blog Figure #8][8]\n\nChinese technology company says Finite State \u2013 who compiled the report \u2013 \u201cmay not fully understand\nhow telecommunications equipment is deployed.\u201d Finite State, for their part, have dismissed Huawei\u2019s\n[\u201cinaccurate rebuttal and baseless attacks.\u201d][9]\n\n##### Vulnerabilities Discovered in Siemens S7 Simatic Architecture \u2013 Posing Threat to Industrial Processes ([Dark Reading][11])\n\n![Blog Figure #10][10]\n\nUnpatched, older Bluetooth devices can make an easy target for hackers looking to hijack IoT\ndevices. And with Bluetooth installed on countless IoT devices from connected automobiles to smart\nthermostats, hackers have no shortage of targets.\n\n---\n\n[Read more](/newsletter/2019-07-11-this-week-in-cybersecurity "Read more")\n\n[1]: https://techcrunch.com/2019/07/09/flaws-anesthesia-respiratory-devices-tampering/\n[2]: /static/images/blog/hospitalscreen.jpg "class:float-left; alt:medical device"\n[3]: https://finance.yahoo.com/news/anomali-discovers-ransomware-targeting-consumer-140200764.html\n[4]: /static/images/blog/ransomware.jpg "class:float-left; alt:locked computer logo"\n[5]:\n https://www.bleepingcomputer.com/news/security/us-coast-guard-issues-safety-alert-following-cyber-incident/\n[6]: /static/images/blog/coastguard1.jpg "class:float-left; alt:boat"\n[7]: https://www.huawei.com/nz/facts/voices-of-huawei/finite-state-letter\n[8]: /static/images/blog/huawei1.jpg "class:float-left; alt:huawei logo"\n[9]: https://t.co/86NeWIjsVC\n[10]: /static/images/blog/siemens.jpg "class:float-left; alt:siemans logo"\n[11]:\n https://www.darkreading.com/vulnerabilities---threats/researchers-poke-holes-in-siemens-simatic-s7-plcs-/d/d-id/1335168\n'}()},66064:function(e){!function(){"use strict";e.exports='---\nuri: 2019-07-19-this-week-in-cybersecurity\nlogo: /static/images/blog/newslettercircuit.jpg "circuit board"\
1nauthor: Karamba Security\ntitle:\n "New US Law on IOT in the Works: The Top News in Product Cybersecurity for the Week of July 19"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge cybersecurity.\n\n---\n\n##### New US IoT Law Proposed to Help Prepare Country\'s Infrastructure for IoT Revolution ([Geek Wire][1])\n\n![Blog Figure #2][2]\n\nAs the IoT revolution picks up speed, Rep. Suzan DelBene (D-WA) introduced legislation this week to\nhelp prepare the country\'s infrastructure to cope with the spike in connected devices. \u201cThe United\nStates can\u2019t afford to wait around while other countries are implementing IoT readiness plans,\u201d\nDelBene said in a statement.\n\n##### Was a Spy Satellite Downed by Hackers? ([Forbes][3])\n\n![Blog Figure #4][4]\n\nThe two French-built Falcon Eye satellites crashed shortly after takeoff in the United Arab Emirates\nearlier this month, amid growing tensions between the UAE and Iran. The crash came after [a report\nwas released][5] that stated that US and NATO systems are vulnerable to cyberattack, and shortly\nafter the US Army Cyber Command [reportedly disabled][6] part of the Iranian Revolutionary Guard\'s\nair defenses with a cyber attack.\n\n##### Hackers Could Seize Your Hair Straightener and Torch Your House ([Pen Test Partners][7])\n\n![Blog Figure #8][8]\n\nCareful with that connected hair straightener - Pen Test Partners this month found that a connected\nhair straightener had no security gate between it and the mobile app. The flaw means that anyone\nwithin range of the device can override the settings, increasing the temperature to well over 400\ndegrees Fahrenheit. That\'s gonna be a bad hair day, to say the least.\n\n##### Big Payday for White Hat Hacker Who Found Vulnerability in Tesla Model 3 ([Security Week][9])\n\n![Blog Figure #10][10]\n\nSam Curry said he [found the flaw][11] while using the Tesla mobile app to arrange a repair. Curry\nreported the issue to Tesla and was awarded several thousand dollars by the company. The flaw could\npotentially be used by a hacker to modify information about cars.\n\n##### How Lithuania Became a Cybersecurity Powerhouse ([Fifth Domain][12])\n\n![Blog Figure #13][13]\n\nThe Global Cybersecurity Index ranked the small Baltic country behind only the United States, United\nKingdom, and France in cybersecurity preparedness. How\u2019d they do it? By placing cybersecurity under\nthe authority of the Ministry of National Defense and by constructing a secure state data-transfer\nnetwork, among other measures. The country\'s Ministry of National Defense said that critical\ninformation infrastructure and government networks remain the most attacked sectors by malware.\n\n##### Early next week, tune in for a special [Black Hat][14] edition of the Karamba Product Cybersecurity Newsletter\n\n![Blog Figure #15][15]\n\n---\n\n[Read more](/newsletter/2019-07-19-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://www.geekwire.com/2019/new-legislation-aims-prepare-american-infrastructure-internet-things-explosion/\n[2]: /static/images/blog/iotnewsletter.jpg "class:float-left; alt:iot devices"\n[3]:\n https://www.forbes.com/sites/zakdoffman/2019/07/12/did-an-iranian-cyberattack-force-a-military-spy-satellite-to-drop-from-the-sky/#56164f1153b0\n[4]: /static/images/blog/satellitenewsletter.jpg "class:float-left; alt:satellite"\n[5]:\n https://www.forbes.com/sites/zakdoffman/2019/07/05/u-s-military-satellites-likely-cyber-attacked-by-china-or-russia-or-both-report/#335b7ec6dd32\n[6]:\n https://www.timesofisrael.com/us-cyber-attack-on-iran-exploited-flaw-in-heavily-guarded-network-experts-say/\n[7]: https://www.pentestpartners.com/security-blog/burning-down-the-house-with-iot/\n[8]: /static/images/blog/firenewsletter.jpg "class:float-left; alt:fire"\n[9]: https://www.securityweek.com/tesla-awards-researcher-10000-after-finding-xss-vulnerability\n[10]: /static/images/blog/teslanewsletter.jpg "class:float-left; alt:tesla logo"\n[11]: https://samcurry.net/cracking-my-windshield-and-earning-10000-on-the-tesla-bug-bounty-program/\n[12]:\n https://www.fifthdomain.com/smr/a-modern-nato/2019/07/15/a-necessary-rise-lithuania-bolsters-its-cybersecurity-catching-the-attention-of-other-nations/#.XS7I-yp_odQ.twitter\n[13]: /static/images/blog/lithuanianewsletter.jpg "class:float-left; alt:lithuania flag"\n[14]: https://www.blackhat.com/us-19/\n[15]: /static/images/blog/blackhatish.jpg "class:float-left; alt:blackhat image"\n'}()},62727:function(e){!function(){"use strict";e.exports='---\nuri: 2019-07-23-black-hat-newsletter\nlogo: /static/images/blog/blackhatguy.jpg "blackhat guy"\nauthor: Karamba Security\ntitle:\n "Black Hat 2019: The 15 Product Cybersecurity Sessions You Won\'t Want to Miss This Year in Vegas"\ndescription:\n We handpicked the top IoT edge, enterprise edge, connected vehicles, and Industry 4.0 product\n security briefings and presentations at this year\'s Black Hat.\n---\n\nWe handpicked the top IoT edge, enterprise edge, connected vehicles, and Industry 4.0 product\nsecurity briefings and presentations at this year\'s Black Hat.\n\n---\n\nThe Karamba Security team will attend Black Hat 2019 on August 7th to 8th in Las Vegas. We call on\nenterprise security thought leaders to shine a light on their IoT edge blind spots and meet us at\nthe Karamba Security booth to learn how! [Click here][17] to book a meeting with the team.\n\n##### [Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs][16]\n\n![Blog Figure #2][2]\n\nSector: Enterprise Edge\n\nLocation: Islander EI\n\nWednesday, August 7th 2:40pm to 3:30pm\n\nCould VPN also stand for "Vulnerable Point of your Network?" Researchers from DEVCORE have found\npre-auth RCEs on multiple leading SSL VPNs, and in this briefing, they will disclose pracical\nattacks they say could compromise millions of targets, including tech giants and industry leaders.\n\n##### [Moving from Hacking IoT Gadgets to Breaking into One of Europe\u2019s Highest Hotel Suites][1]\n\n![Blog Figure #2][2]\n\nSector: Enterprise Edge\n\nLocation: Islander FG\n\nThursday, August 8th 5pm to 6pm\n\nIoT devices can be a security blind spot for companies. In this briefing, learn how hackers can take\nover IoT devices and then use them as a gateway to hit a larger system \u2013 in this case the mobile\nphone key system of a major hotel chain.\n\n##### [Roadways to Exploit and Secure Connected BMW Cars][3]\n\n![Blog Figure #2][2]\n\nSector: Connected Vehicles\n\nLocation: South Seas ABE\n\nThursday, August 8th 12:10pm to 1pm\n\nIn this presentation, three engineers from Keenlab and two security officials from BMW Group will\ndiscuss the vulnerabilities of connected cars and how to keep passengers safe.\n\n##### [Arm IDA and Cross Check: Reversing the Boeing 787\'s Core Network][4]\n\n![Blog Figure #2][2]\n\nSector: Connected Vehicles\n\nLocation: Lagoon GHI\n\nWednesday, August 7th 4:00pm to 4:50pm\n\nReuben Santamarta will highlight the Boeing 787\u2019s Core Network, showing the previously unknown\nvulnerabilities that can let an attacker in.\n\n##### [Attacking Electric Motors for Fun and Profit][5]\n\n![Blog Figure #2][2]\n\nSector: Connected Vehicles\n\nLocation: Islander FG\n\nWednesday, August 7th 11:15am to 12:05pm\n\nElectric motors power everything from autonomous vehicles to industrial robots. They are controlled\nby hardware and software and are subject to attack. Briefing to be hosted by Matthew Jablonski and\nDuminda Wijesekera of George Mason University.\n\n##### [Cybersecurity Risk Assessment for Safety-Critical Systems][6]\n\n![Blog Figure #2][2]\n\nSector: Industry 4.0\n\nLocation: South Pacific\n\nWednesday, August 7th 5:05pm to 5:30pm\n\nToday\u2019s critical infrastru
1cture needs strong cybersecurity and this is especially true with space\nsystems. In this presentation, three researchers from Honeywell will discuss cyber threats to space\nsystems and how to make them safer.\n\n##### [Rogue7: Rogue Engineering-Station Attacks on S7 Simatic PLCs][7]\n\n![Blog Figure #2][2]\n\nSector: Industry 4.0\n\nLocation: Breakers GHI\n\nThursday, August 8th 11:00am to 11:50am\n\nEven the latest version of the Siemens industrial control systems devices and protocols can be\nexploited by attackers. This presentation will show how an attacker could reverse-engineer the\ncryptographic protocol and inject messages.\n\n##### [Sensor and Process Fingerprinting in Industrial Control Systems][8]\n\n![Blog Figure #2][2]\n\nSector: Connected Vehicles\n\nLocation: Breakers GHI\n\nWednesday, August 7th 11:15am to 12:05pm\n\nThis presentation will examine the common cyberattack vectors for crucial infrastructures and review\ndefense strategies.\n\n##### [All the 4G Modules Could be Hacked][9]\n\n![Blog Figure #2][2]\n\nSector: Enterprise Edge\n\nLocation: South Seas CDF\n\nWednesday, August 7th 1:30pm to 2:20pm\n\nHow secure are the 4G modules that are used in IoT devices like laptops and vending machines? In\nthis presentation, four researchers from Baidu Security Lab will discuss the major brand 4G modules\non the market to seek out their vulnerabilities.\n\n##### [Legal GNSS Spoofing and its Effects on Autonomous Vehicles][10]\n\n![Blog Figure #2][2]\n\n"Sector: Connected Vehicles"\n\nLocation: Breakers GHI\n\nWednesday, August 7th 10:30am to 10:55am\n\nGlobal Navigation System Satellites are a crucial tool, but often public GNSS does not have the\nnecessary integrity mechanisms and is vulnerable to spoofing. Victor Murray of SwRI will discuss the\nusefulness of real-world evaluation of GNSS vulnerabilities.\n\n##### [Critical Zero Days Remotely Compromise the Most Popular Real-Time OS ][11]\n\n![Blog Figure #2][2]\n\nSector: Enterprise Edge\n\nLocation: South Seas CDF\n\nThursday, August 8th 2:30pm to 3:20pm\n\nBen Seri and Dor Zusman of Armis Security will show the vulnerabilities they\u2019ve found in a\nreal-time, very well-known OS, and show how they can be exploited to breach a secure network.\n\n##### [The Future of Securing Intelligent Electronic Devices Using the IEC 62351-7 Standard for Monitoring][12]\n\n![Blog Figure #2][2]\n\nSector: Industry 4.0\n\nLocation: Jasmine\n\nThursday, August 8th 9:00am to 9:25am\n\nNozomi Networks Co-founder and CPO Andrea Carcajou and security researchers from Nozomi Networks\nLabs will analyze how standards like IEC 62351 can defend Industry 4.0 systems against cyber\nthreats.\n\n##### [Chip.Fail - Glitching the Silicon of the Connected World][13]\n\n![Blog Figure #2][2]\n\nSector: Enterprise Edge\n\nLocation: Islander FG\n\nWednesday, August 7th 2:40pm to 3:30pm\n\nEvery smart device uses processors, but how safe are they? In this presentation, Thomas Roth and\nJosh Datko of Keylabs will show how with less than one hundred dollars they can break some of the\nmost popular IoT processors.\n\n##### [Breaking Through Another Side: Bypassing Firmware Security Boundaries from Embedded Controller][14]\n\n![Blog Figure #2][2]\n\nSector: Enterprise Edge\n\nLocation: Lagoon GHI\n\nThursday, August 8th 9:45am to 10:35am\n\nAlex Matrosov of NVIDIA and Alexandre Gazet from Airbus will showcase reverse engineering the\nEmbedded Controller of a Lenovo Thinkpad and demonstrate the design problems inherent in many\nthird-party components.\n\n##### [The Enemy Within: Modern Supply Chain Attacks][15]\n\n![Blog Figure #2][2]\n\nSector: Enterprise Edge\n\nLocation: Islander EI\n\nThursday, August 8th 9:45am to 10:35am\n\nThis briefing will go behind the scenes to look at previously undisclosed supply chain attacks and\ndiscuss the methods of the attackers and how they were thwarted.\n\n---\n\n[Read more](/newsletter/2019-07-23-black-hat-newsletter "Read more")\n\n[1]:\n https://www.blackhat.com/us-19/briefings/schedule/#moving-from-hacking-iot-gadgets-to-breaking-into-one-of-europes-highest-hotel-suites-16099\n[2]: /static/images/blog/blackhatimage.jpg "class:float-left;
1 alt:blackhat logo"\n[3]:\n https://www.blackhat.com/us-19/briefings/schedule/#-days--mitigations-roadways-to-exploit-and-secure-connected-bmw-cars-15313\n[4]:\n https://www.blackhat.com/us-19/briefings/schedule/index.html#arm-ida-and-cross-check-reversing-the-boeing-s-core-network-15716\n[5]:\n https://www.blackhat.com/us-19/briefings/schedule/#attacking-electric-motors-for-fun-and-profit-16141\n[6]:\n https://www.blackhat.com/us-19/briefings/schedule/#cybersecurity-risk-assessment-for-safety-critical-systems-15631\n[7]: https://ubm.io/2M8mRJE\n[8]:\n https://www.blackhat.com/us-19/briefings/schedule/#sensor-and-process-fingerprinting-in-industrial-control-systems-16102\n[9]: https://www.blackhat.com/us-19/briefings/schedule/#all-the-g-modules-could-be-hacked-16187\n[10]:\n https://www.blackhat.com/us-19/briefings/schedule/#legal-gnss-spoofing-and-its-effects-on-autonomous-vehicles-15497\n[11]:\n https://www.blackhat.com/us-19/briefings/schedule/#critical-zero-days-remotely-compromise-the-most-popular-real-time-os-15559\n[12]:\n https://www.blackhat.com/us-19/briefings/schedule/#the-future-of-securing-intelligent-electronic-devices-using-the-iec---standard-for-monitoring-16401\n[13]:\n https://www.blackhat.com/us-19/briefings/schedule/#chipfail---glitching-the-silicon-of-the-connected-world-15192\n[14]:\n https://www.blackhat.com/us-19/briefings/schedule/#breaking-through-another-side-bypassing-firmware-security-boundaries-from-embedded-controller-15902\n[15]:\n https://www.blackhat.com/us-19/briefings/schedule/index.html#the-enemy-within-modern-supply-chain-attacks-16241\n[16]:\n https://www.blackhat.com/us-19/briefings/schedule/#infiltrating-corporate-intranet-like-nsa---pre-auth-rce-on-leading-ssl-vpns-15545\n[17]: https://calendly.com/blackhat2019/karamba-black-hat-2019?month=2019-08&date=2019-08-07\n'}()},9626:function(e){!function(){"use strict";e.exports='---\nuri: 2019-07-26-this-week-in-cybersecurity\nlogo: /static/images/blog/greenletters.jpg "green letters"\nauthor: Karamba Security\ntitle:\n "Critical Flaw in VPN Opens the Door to Hackers: The Top News in Product Cybersecurity for the\n Week of July 26"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Critical RCE Flaw in Palo Alto VPN Allows Hackers to Execute Arbitrary Code \u2013 Uber and Twitter Among Companies Affected ([Tech Crunch][1])\n\n![Blog Figure #2][2]\n\nThe vulnerability in Palo Alto Networks\u2019 products allows an unauthenticated attacker to gain VPN\naccess to an internal network and execute arbitrary code. PAN issued a patch for the vulnerability,\nbut researchers found other companies, including Uber, that are still running a vulnerable version\non their AWS deployment. The flaws were found by Devcore researchers, who claimed they found flaws\nin corporate VPN providers Pulse Secure and Fortinet, and in systems belonging to Twitter. Read\ntheir analysis [here][11]\n\n##### 13 Vulnerabilities Disclosed in U-Boot Loader ([SC Magazine][3])\n\n![Blog Figure #4][4]\n\nVulnerabilities provide an opening for a hacker to execute code on a U-Boot powered device if they\nare in the same network as the device.\n\n##### Nvidia Patches Tegra Linux Driver Package \'Selfblow\' Exploit ([Tom\'s Hardware][5])\n\n![Blog Figure #6][6]\n\nThe flaw enabled malicious code execution \u201con every single Tegra device released so far\u201d researcher\nsays. The flaw was first discovered on March 9th, but the security patch was only released by\ncompany this week.\n\n##### US Lawmakers Propose Bills to Secure Connected Planes, Trains and Automobiles ([Nextgov][7])\n\n![Blog Figure #8][8]\n\nThe two bills introduced by Senate Democrats would require government regulation of the security on\nautomotive and aviation IT systems. Among other things, the bills call on manufactures to isolate\ncritical systems and carry out frequent penetration testing.\n\n##### Malware Hack Hit German Blue Chip Companies ([Reuters][9])\n\n![Blog Figure #10][10]\n\nGerman TV broadcaster ARD said the hackers used a type of malware called Winnti that gives attackers\nthe ability to remotely access a victim\u2019s computer network. Alongside BASF, Siemens, and Henkel,\nother companies hit include Roche, Marriott, Lion Air, Sumitomo, and Shin-Etsu, according to ADR.\n\n---\n\n[Read more](/newsletter/2019-07-26-this-week-in-cybersecurity "Read more")\n\n[1]: https://techcrunch.com/2019/07/23/corporate-vpn-flaws-risk/\n[2]: /static/images/blog/uberphone.jpg "class:float-left; alt:uber phone"\n[3]:\n https://www.scmagazine.com/home/security-news/vulnerabilities/13-vulnerabilities-disclosed-in-u-boot-loader/\n[4]: /static/images/blog/computercodenewsletter.jpg "class:float-left; alt:code"\n[5]: https://www.tomshardware.com/news/nvidia-patches-tegra-chipset-flaw,39993.html\n[6]: /static/images/blog/nvidia.jpg "class:float-left; alt:nvidia"\n[7]:\n https://www.nextgov.com/cybersecurity/2019/07/lawmakers-prop
1ose-bills-secure-connected-planes-trains-and-automobiles/158599/\n[8]: /static/images/blog/uscapitol.jpg "class:float-left; alt:capitol building"\n[9]:\n https://uk.reuters.com/article/uk-germany-cyber/basf-siemens-henkel-roche-target-of-cyber-attacks-idUKKCN1UJ154\n[10]: /static/images/blog/malware.jpg "class:float-left; alt:green grid"\n[11]:\n https://devco.re/blog/2019/07/17/attacking-ssl-vpn-part-1-PreAuth-RCE-on-Palo-Alto-GlobalProtect-with-Uber-as-case-study/\n'}()},68502:function(e){!function(){"use strict";e.exports='---\nuri: 2019-08-01-this-week-in-cybersecurity\nlogo: /static/images/blog/newslettercircuits.jpg "circuit board"\nauthor: Karamba Security\ntitle:\n "Vulnerabilities Found in OS Used by More than 2 Billion Devices: The Top News in Product\n Cybersecurity for the Week of August 1"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Researchers Reveal 11 Security Flaws that Can Affect a Wide Range of IoT Devices ([ZDNet][1])\n\n![Blog Figure #2][2]\n\nThe vulnerabilities described in the report affect Wind River\u2019s VxWorks operating system, which is\ncurrently deployed on more than two billion connected devices. [Read the original research team\nreport here][3].\n\n##### Vulnerabilities Leave Mitsubishi Software Open to Attack ([Security Week][4])\n\n![Blog Figure #5][5]\n\nOne of the flaws affecting Mitsubishi\u2019s FR Configurator2 is classified as \u201chigh severity,\u201d and can\nbe exploited by an attacker to read and steal files from the targeted system.\n\n##### Report: Hackers Can Manipulate IoT Cameras to Hide Evidence of Crimes ([ZDNet][6])\n\n![Blog Figure #7][7]\n\nResearchers find that vulnerabilities in IoT cameras can allow hackers to remotely access networks\nand edit live-streamed footage in order to hide evidence of crimes. [Read the original research team\nreport here][8].\n\n##### Have Russian Hackers Developed a New Method for Installing Malware? ([Dark Reading][9])\n\n![Blog Figure #10][10]\n\nA new report describes hacking method as a \u201cman-on-the-side\u201d attack, which allows a threat actor to\ninject malicious content into legitimate traffic. [Read the original research team report here][11]\n\n##### Lights Out JoBurg: Major Ransomware Attack Leaves South Africa\u2019s Largest City in the Dark ([The Hacker News][12])\n\n![Blog Figure #13][13]\n\nRansomware attack encrypted utility company\u2019s databases, applications, and networks. Company was\nable to get power back up and running quickly, but the attack caused widespread problems for\ncustomers trying to access the company website to pay electricity bills.\n\n##### Homeland Security Warns Hackers Can \u201cEasily Manipulate\u201d Small Aircraft and Take Control ([threatpost][14])\n\n![Blog Figure #17][17]\n\nThe [DHS alert][15] follows publication of a report by Rapid 7 that described how hackers can easily\ngain access to an aircraft\u2019s Controller Area Network (CAN) bus. [Read the original research team\nreport here][16]\n\n---\n\n[Read more](/newsletter/2019-08-01-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://www.zdnet.com/article/urgent11-security-flaws-impact-routers-printers-scada-and-many-iot-devices/\n[2]: /static/images/blog/newsletterglobe.jpg "class:float-left; alt:silver globe"\n[3]: https://armis.com/urgent11/\n[4]: https://www.securityweek.com/vulnerabilities-found-mitsubishi-inverter-engineering-software\n[5]: /static/images/blog/newslettermitsubishi.jpg "class:float-left; alt:mitsubishi logo"\n[6]:\n https://www.zdnet.com/article/how-crooks-can-cover-up-crimes-by-hacking-iot-cameras-to-show-fake-footage/\n[7]: /static/images/blog/newslettercamera.jpg "class:float-left; alt:cameras"\n[8]:\n https://www.forescout.com/company/resources/iot-research-report-transforming-cybersecurity-strategy-for-the-age-of-iot/\n[9]:\n https://www.darkreading.com/attacks-breaches/russian-threat-group-may-have-devised-a-man-on-the-side-attack-/d/d-id/1335348\n[10]: /static/images/blog/newsletterattacker.jpg "class:float-left; alt:hacker"\n[11]: https://www.secureworks.com/blog/own-the-router-own-the-traffic\n[12]: https://thehackernews.com/2019/07/cyberattack-power-outage.html\n[13]: /static/images/blog/newsletterjoburg.jpg "class:float-left; alt:johannesburg"\n[14]: https://threatpost.com/dhs-warning-small-aircraft-hacking/146795/\n[15]: https://www.us-cert.gov/ics/alerts/ics-alert-19-211-01\n[16]:\n https://blog.rapid7.com/2019/07/30/new-research-investigating-and-reversing-avionics-can-bus-systems/\n[17]: /static/images/blog/newsletterplanee.jpg "class:float-left; alt:plane"\n'}()},18928:function(e){!function(){"use strict";e.exports='---\nuri: 2019-08-04-defcon-newsletter\nlogo: /static/images/blog/defcontitle.jpg "poster"\nauthor: Karamba Security\ntitle: "DEF CON 2019: What to Watch for in Product Cybersecurity"\ndescription:\n A look at the sessions covering IoT edge, enterprise edge, connected vehicles, and Industry 4.0\n product security this week in Vegas.\n---\n\nA look at the sessions covering IoT edge, enterprise edge, connected vehicles, and Industry 4.0\nproduct security this week in Vegas.\n\n---\n\n##### Your Car is My Car\n\n![Blog Figure #1][1]\n\nSector: Automotive\n\nLocation: Track 1\n\nSpeakers: Jmaxxz\n\nSaturday, August 10th at 11:00\n\nListen to one softw
1are engineer (and hacker at heart) as he describes what he learned when he looked\ninside a remote access system for a car.\n\n##### Weaponizing Hypervisors to Fight and Beat Car and Medical Devices Attacks\n\n![Blog Figure #1][1]\n\nSector: IoT\n\nLocation: Track 1\n\nSpeakers: Ali Islam, CEO Numen Inc. Dan Regalado (DanuX) CTO Numen Inc\n\nSaturday, August 10th at 10:00\n\nLearn about the steps needed to setup a framework running on Xilinx ZCU102 boards and to eliminate\nmalicious threats \u2013 and much, much more.\n\n##### Reverse Engineering 17+ Cars in Less Than 10 Minutes\n\n![Blog Figure #1][1]\n\nSector: Automotive\n\nLocation: Track 1\n\nSpeakers: Brent Stone\n\nSaturday, August 10th at 16:00\n\nThink you work fast? In this demo, Brent Stone, a US military cyber officer, will show how he can\nreverse engineer 17 or more unknown passenger vehicle CAN networks in under 10 minutes.\n\n##### Reverse-Engineering 4g Hotspots for Fun, Bugs and Net Financial Loss\n\n![Blog Figure #1][1]\n\nSector: Enterprise Edge\n\nLocation: Track 2\n\nSpeakers: g richter\n\nSaturday, August 10th at 15:00\n\nPen Test Partners Senior Researcher g richter will discuss how malleable, frustrating, and insecure\nconsumer 4G routers really are.\n\n##### Vacuum Cleaning Security - Pinky and the Brain Edition\n\n![Blog Figure #1][1]\n\nSector: Consumer IoT\n\nLocation: Track 4\n\nSpeakers: jiska TU Darmstadt, Secure Mobile Networking Lab clou (Fabian Ullrich)\n\nSaturday, August 10th at 16:00\n\nTake a dive into the security of Neato and Vorwerk ecosystems \u2013 and how they can be bypassed.\n\n##### Exploiting Qualcomm WLAN and Modem Over The Air\n\n![Blog Figure #1][1]\n\nSector: Enterprise Edge\n\nLocation: Track 3\n\nSpeakers: Xiling Gong, Peter Pi\n\nSunday, August 11th at 11:00\n\nTencent and NCC researchers will highlight their research into exploiting Qualcomm WLAN as well as\nthe zero-days they found on the attack surfaces of WLAN firmware.\n\n##### Say Cheese\u2014How I Ransomwared Your DSLR Camera\n\n![Blog Figure #1][1]\n\nSector: Consumer IoT\n\nLocation: Track 4\n\nSpeakers: Eyal Itkin\n\nSunday, August 11th at 11:00\n\nA Check Point researcher will demonstrate how an attacker can infect a DSLR camera with ransomware\nand encrypt the photos.\n\n##### Adventures In Smart Buttplug Penetration (testing)\n\n![Blog Figure #1][1]\n\nSector: Consumer IoT\n\nLocation: Track 2\n\nSpeakers: Smea\n\nSunday, August 11th at 10:00\n\nHope you\u2019re sitting down for this one. Actually, maybe not. In this talk, smea will look at how the\nsecurity of connected sex toys can be bypassed.\n\n##### HVACking: Understand the Difference Between Security and Reality!\n\n![Blog Figure #1][1]\n\nSector: Industry 4.0\n\nLocation: Track 2\n\nSpeakers: Douglas McKee, Mark Bereza\n\nFriday, August 9th at 13:00\n\nMcAfee researchers will examine the 0-day vulnerability they found in a major building controller\nand how an attack could play out in a critical scenario.\n\n##### Malproxying: Leave Your Malware at Home\n\n![Blog Figure #1][1]\n\nSector: Enterprise Edge\n\nLocation: Track 2\n\nSunday, August 11th at 12:00\n\nResearchers will show a new approach to allow malicious code to bypass most endpoint protection\nmeasures, a technique they\u2019re calling \u201cmalproxing.\u201d\n\n##### SDR Against Smart TVs: URL and Channel Injection Attacks\n\n![Blog Figure #1][1]\n\nSector: Consumer IoT\n\nLocation: Track 2\n\nSpeakers: Pedro Cabrera Camara\n\nSunday, August 11th at 11:00\n\nGet a detailed look at how you can use low cost SDR devices to attack the HbbTV platform of Smart\nTV.\n\n##### Intro to Embedded Hacking\u2014How you too can find a decade old bug in widely deployed devices. [REDACTED] Deskphones, a case study.\n\n![Blog Figure #1][1]\n\nSector: Enterprise Edge\n\nLocation: DC 101, Paris Theatre\n\nSpeakers: Philippe Laulheret\n\nThurday, August 8th at 1:00pm\n\nSenior McAfee researcher Philippe Laulheret will present an introduction to hardware hacking and\nshow how secure those VOIP phones at your work are \u2013 or aren\u2019t.\n\n##### All the 4G Modules Could Be Hacked\n\n![Blog Figure #1][1]\n\nSector: IoT\n\nLocation: Track 3\n\nSpeakers: XiaoHuiHui, Ye Zhang, ZhengHuang\n\nFriday, August 9th at 11:00\n\nBaidu researchers will showcase their research on the safety of the major brand 4G modules built\ninto IoT devices, and the vulnerabilities that were rife with all of them.\n\n##### HackPac: Hacking Pointer Authentication in iOS User Space\n\n![Blog Figure #1][1]\n\nSector: Consumer IoT\n\nLocation: Track 1\n\nSpeakers: Xiaolong Bai, Min (Spark) Zheng\n\nFriday, August 9th at 13:00\n\nThis presentation will look at the fatal flaw foun
1d in the implementation of iOS PAuth, and how it\ncan make user-space system services vulnerable to code-reuse attacks.\n\n---\n\n[Read more](/newsletter/2019-08-04-defcon-newsletter "Read more")\n\n[1]: /static/images/blog/defcon.jpg "class:float-left; alt:defcon"\n'}()},59598:function(e){!function(){"use strict";e.exports='---\nuri: 2019-08-09-this-week-in-cybersecurity\nlogo: /static/images/blog/streetlights.jpg "streetlights"\nauthor: Karamba Security\ntitle:\n "Russian Hackers Targeting IoT Systems, How Hackers Can Fool AI Cybersecurity and More: The Top\n News in Product Cybersecurity for the Week of August 9"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### QualPwn Vulnerability Could Cause Remote Code Execution Vulnerabilities in Qualcomm Devices ([ZDNet][1])\n\n![Blog Figure #2][2]\n\nFound by Tencent Blade, the first vulnerability (CVE-2019-10538) affects Qualcomm WLAN component and\nthe Android Kernel, the second (CVE-2019-10540) affects Qualcomm WLAN and modem firmware. Both are\nbuffer overflows that could allow an attacker to compromise the Android Kernel over-the-air.\n\n##### Russian Group that Hacked 2016 US Election Behind Targeted IoT Attack, Microsoft says ([Forbes][3])\n\n![Blog Figure #4][4]\n\nMicrosoft attributed the attack to hacker group Strontium, which also goes by the name Fancy Bear\nand is believed to be controlled by Russian Intelligence. Devices targeted included a VoIP phones,\nEnterprise printers, and video decoders. Microsoft also issues call for better enterprise\nintegration of IoT devices. [Read the original detailed report here][13]\n\n##### Hackers Ramp Up Attacks on Industrial Targets With Destructive Malware, Report Finds ([ZDNet][5])\n\n![Blog Figure #6][6]\n\nResearch by IBM finds that 50 percent of organizations affected by cyberattacks over the past 6\nmonths have been from the manufacturing sector. The Report states that hackers are using destructive\nmalware meant to cause damage to systems, rather than steal data or carry out surveillance.\n\n##### New Dragonblood vulnerabilities found in WiFi WPA3 Standard, Allowing Hackers to Brute Force the WiFi Password ([ZDNet][7])\n\n![Blog Figure #8][8]\n\nFour months after the previous vulnerability was found, researchers find two more vulnerabilities\nthat can give an attacker access to the whole WiFi network.\n\n##### Can Hackers Trick AI-Based Endpoint Security? Researchers Manage to Fool AI-Based BlackBerry Cylance Heuristic System ([CPO Magazine][9])\n\n![Blog Figure #10][10]\n\nAustralian researchers reverse engineered the antivirus software by taking advantage of biases in\nits whitelist, and fool it into viewing malignant malware as harmless.\n\n##### Lack of Authentication Flaw in Amcrest IP2M-841B Home Camera Allows Remote Spying ([ZDNet][11])\n\n![Blog Figure #12][12]\n\nResearchers find that the IP camera has an easy to exploit bug which allows attackers to eavesdrop\non a user\u2019s audio streams. The vulnerability (CVE-2019-3948) allows an attacker to access the HTTP\nendpoint without authentication.\n\n---\n\n[Read more](/newsletter/2019-08-09-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://www.zdnet.com/article/qualpwn-vulnerabilities-in-qualcomm-chips-let-hackers-compromise-android-devices/\n[2]: /static/images/blog/qualcomm.jpg "class:float-left; alt:qualcomm logo"\n[3]:\n https://www.forbes.com/sites/zakdoffman/2019/08/05/microsoft-warns-russian-hackers-can-breach-companies-through-millions-of-simple-iot-devices/#75995794617f\n[4]: /static/images/blog/coolgreen.jpg "class:float-left; alt:green circuits"\n[5]:\n https://www.zdnet.com/article/cyberattacks-against-industrial-targets-double-over-the-last-6-months/?ftag=COS-05-10aaa0g&utm_campaign=trueAnthem%3A+Trending+Content&utm_content=5d47e5aaffeb9a00013b8227&utm_medium=trueAnthem&utm_source=twitter\n[6]: /static/images/blog/factories.jpg "class:float-left;
1 alt:factories"\n[7]: https://www.zdnet.com/article/new-dragonblood-vulnerabilities-found-in-wifi-wpa3-standard/\n[8]: /static/images/blog/wifiguy.jpg "class:float-left; alt:wifi symbol"\n[9]:\n https://www.cpomagazine.com/cyber-security/researchers-trick-cylance-antivirus-into-thinking-malware-is-trusted-software/\n[10]: /static/images/blog/cyberlock.jpg "class:float-left; alt:locked computer"\n[11]: https://www.zdnet.com/article/iot-home-security-camera-allows-hackers-to-listen-in-over-http/\n[12]: /static/images/blog/homecameras.jpg "class:float-left; alt:home cameras"\n[13]: https://msrc-blog.microsoft.com/2019/08/05/corporate-iot-a-path-to-intrusion/\n'}()},97310:function(e){!function(){"use strict";e.exports='---\nuri: 2019-08-22-what-we-learned-defcon\nlogo: /static/images/blog/defconbanner2.jpg "defcon logo"\nauthor: Karamba Security | August 22nd, 2019\ntitle: The Top 7 Product Security Lessons From DEFCON\ndescription:\n From substandard router security to ransomware attacks on your camera, it was an eye-opening week\n at DEFCON earlier this month. Here are the top product security takeaways.\n---\n\nFrom substandard router security to ransomware attacks on your camera, it was an eye-opening week at\nDEFCON earlier this month. Here are the top product security takeaways.\n\n---\n\n##### Study Finds \u201cTerrible\u201d Security Measures in 18 Leading Vendors - including Asus, Belkin, D-Link, Linksys, TP-Link and More ([SecurityLedger][1])\n\n![Blog Figure #2][2]\n\nStudy analyzed more than 6,000 firmware images reaching back 15 years and found that even the most\nupdated firmware doesn\u2019t protect against overflow attacks.\n\n##### Researchers Find 35 vulnerabilities in Office Printers Manufactured by HP, Ricoh, Xerox, Lexmark, Kyocera and Brother ([threatpost][3])\n\n![Blog Figure #4][4]\n\nOf the vulnerabilities, 22 are overflow attacks which can lead to remote code execution and the\ncomplete takeover of an entire enterprise network. Office printers were once again a hot topic, and\nresearchers [presented][13] how to steal data from an enterprise by sending a fax to its office\nprinter.\n\n##### Smile, You\u2019re Being Hacked: How Hackers Could Implant Malware in a Canon DSLR Camera to Hold Users\u2019 Pictures for Ransom ([threatpost][5])\n\n![Blog Figure #6][6]\n\nThe first attack scenario included an attacker that takes over a PC and leapfrogs an infection into\na camera via a USB connection. The second involves placing a rogue Wi-Fi access point in a public\nsetting to leverage a remote attack against the targeted camera. Using the CVE-2019-5995 bug, the\nresearcher was able to run a silent and malicious firmware update.\n\n##### Hackers Can Turn a Tesla Model S into a Surveillance Device ([SecuritySales][7])\n\n![Blog Figure #8][8]\n\nUsing free code available on GitHub, security researcher Truman Kain was able to turn the car\u2019s\nbuilt-in cameras into a surveillance system that identifies, tracks, and stores faces and license\nplates.\n\n##### Two Security Flaws in Xilinix SoC Boards Secure Boots Jeopardize Automotive, Aviation, and Industrial Components ([ZDnet][9])\n\n![Blog Figure #10][10]\n\nResearchers say the Encrypt Only secure boot mode in Xilinix\u2019s Zynq UltraScale+ brand, which\nincludes SoC, multi-processor system-on-chip (MPSoC), and radio frequency system-on-chip(RFSoC),\ndoes not encrypt boot image metadata, leaving this data vulnerable to malicious modifications. Read\nthe full paper [here][14].\n\n##### Hackers Could Use Remote Ignition App to Steal Tens of Thousands of Vehicles ([Wired][11])\n\n![Blog Figure #12][12]\n\nSoftware engineer Jmaxxz showcased the vulnerabilities that could allow a hacker to use the \u201cMyCar\u201d\napp to pinpoint and steal cars.\n\n##### Malware Can be Remotely Installed in Headphones to Turn them Into Acoustic Weapons and Track Users ([Wired][15])\n\n![Blog Figure #16][16]\n\nA cybersecurity researcher developed malware which can allow an attacker to physically destroy\ndevices and cause bodily harm to users.\n\n---\n\n[Read more](/newsletter/2019-08-22-what-we-learned-defcon "Read more")\n\n[1]: https://securityledger.com/2019/08/
1huge-survey-of-firmware-finds-no-security-gains-in-15-years/\n[2]: /static/images/blog/securitynewsletter.jpg "class:float-left; alt:security logo"\n[3]: https://threatpost.com/office-printers-hackers-open-door/147083/\n[4]: /static/images/blog/securityprinter.jpg "class:float-left; alt:printer"\n[5]: https://threatpost.com/hack-of-a-canon-eos-80d-dslr/147214/\n[6]: /static/images/blog/canonnewsletter.jpg "class:float-left; alt:camera"\n[7]: https://www.securitysales.com/news/hacker-tesla-surveillance-station/\n[8]: /static/images/blog/teslanewsletter1.jpg "class:float-left; alt:tesla logo"\n[9]: https://www.zdnet.com/article/unpatchable-security-flaw-found-in-popular-soc-boards/\n[10]: /static/images/blog/citynewsletter.jpg "class:float-left; alt:city street"\n[11]: https://www.wired.com/story/mycar-remote-start-vulnerabilities/\n[12]: /static/images/blog/carsnewsletter.jpg "class:float-left; alt:car lot"\n[13]:\n https://threatpost.com/def-con-2018-critical-bug-opens-millions-of-hp-officejet-printers-to-attack/134972/\n[14]:\n https://raw.githubusercontent.com/inversepath/advisories/master/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU%2B-Encrypt_Only_Secure_Boot_bypass.txt\n[15]: https://www.wired.com/story/acoustic-cyberweapons-defcon/\n[16]: /static/images/blog/headphonesnewsletter.jpg "class:float-left; alt:headphones"\n'}()},20616:function(e){!function(){"use strict";e.exports='---\nuri: 2019-08-23-this-week-in-cybersecurity\nlogo: /static/images/blog/tracerlights.jpg "tracers"\nauthor: Karamba Security | August 23rd, 2019\ntitle:\n "Critical Bugs in Cisco Switches, Vulnerabilities in Google\'s Nest Camera, and Much More: The Top\n News in Product Security for This Past Week"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Cisco Patches Six Critical Bugs in UCS Gear and 220 Series Smart Switches ([threatpost][1])\n\n![Blog Figure #2][2]\n\nCisco urged users to patch two vulnerabilities that affect its small business 220 Series Smart\nswitches [(CVE-2019-1913][11] and [(CVE-2019-1912)][12]. Both of the vulnerabilities are buffer\noverflows and an exploit for each is available online.\n\n##### Researchers Manage to Steal Data from a Private Network by Connecting to the Guest Router ([Consumer Affairs][3])\n\n![Blog Figure #4][4]\n\nStudy included routers from a variety of popular brands including Edimax, TP-Link and Linksys. Each\nrouter revealed the same thing: because the router ultimately hosts two networks, hackers can\nutilize shared channels between both of them to either steal information or share data between the\ntwo networks. Read the full academic paper [here][13].\n\n##### Researchers Bypassed a Siemens SIMATIC S7 PLC\u2019s Cryptographic Communication ([Security Week][5])\n\n![Blog Figure #6][6]\n\nIsraeli researchers have reverse-engineered the PLC network communication protocol. The most recent\nversions of the S7 protocol have cryptographic message integrity checks that should protect\ncommunication from malicious tampering. However, researchers managed to develop a rogue engineering\nworkstation that mimicked the TIA Portal (the software the PLC communicate with), allowing it to\ninteract with the PLC. Such a rogue workstation can be set up by an attacker who has access to the\ntargeted organization\u2019s network and the PLC.\n\n##### Vulnerabilities in Google\u2019s Nest Camera Allow DoS, Remote Code Execution, and More ([threatpost][7])\n\n![Blog Figure #8][8]\n\nCisco Talos researchers find a total of 8 vulnerabilities in the security camera that would let an\nattacker on the same network hijack the device, force a denial-of-service, or disclose information.\n\n##### Vulnerabilities Found in Siemens SCALANCE Industrial Switch Eevices ([SecurityWeek][9])\n\n![Blog Figure #10][10]\n\nThe vulnerabilities could cause a DoS by repeatedly sending large message packets to the Telnet\nservice. After the crash, the device is automatically restarted, disconnecting all connected devices\nfrom the network.\n\n---\n\n[Read more](/newsletter/2019-08-23-this-week-in-cybersecurity "Read more")\n\n[1]: https://threatpost.com/cisco-patches-six-critical-bugs/147585/\n[2]: /static/images/blog/computerbugnewsletter.jpg "class:float-left; alt:computers"\n[3]:\n https://www.consumeraffairs.com/news/guest-networks-on-routers-arent-as-safe-as-they-seem-081519.html\n[4]: /static/images/blog/routernewsletter.jpg "class:float-left; alt:routers"\n[5]: https://www.securityweek.com/hackers-can-use-rogue-engineering-stations-target-siemens-plcs\n[6]: /static/images/blog/siemensnewsletter.jpg "class:float-left; alt:siemens"\n[7]: https://threatpost.com/google-nest-security-cam-takeover/147477/\n[8]: /static/images/blog/securitycameranewsletter.jpg "class:float-left; alt:camera"\n[9]: https://www.securityweek.com/siemens-scalance-x-switches-vulnerable-dos-attacks\n[10]: /static/images/blog/greencodenewsletter.jpg "class:float-left;
1 alt:locked computer"\n[11]:\n https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190806-sb220-rce\n[12]:\n https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190806-sb220-auth_bypass\n[13]: https://www.usenix.org/system/files/woot19-paper_ovadia.pdf\n'}()},11982:function(e){!function(){"use strict";e.exports='---\nuri: 2019-08-30-this-week-in-cybersecurity\nlogo: /static/images/blog/backgroundblog.jpg "random shapes"\nauthor: Karamba Security | August 30th, 2019\ntitle:\n "New Malware that Attacks Android Devices, Hackers Steal a Tesla in 30 Seconds and Much More: The\n Top News in Product Security for This Past Week"\n\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### New Mirai-like Malware \u2018Ares\u2019 Attacks Android Set-top Boxes ([Zdnet][1])\n\n![Blog Figure #2][2]\n\nAres searches for Android devices with open ADB ports and then infects the device, causing it to\nthen seek out new vulnerable Android devices. Ares can also target devices running Telnet services,\nLinux-based servers, and smart devices. The initial main targets included HiSilicon, Cubetek, and\nQezyMedia. Read the full technical report [here][3].\n\n##### Flaw in Open-Source Hardware Virtualization Package QEMU Allows Virtual Machine Escapes and Arbitrary Code Attacks ([TechRepublic][4])\n\n![Blog Figure #5][5]\n\nThe vulnerability (CVE-2019-14378) allows attackers to break out of their guest OS and attack the\nhost OS that QEMU runs on.\n\n##### Day One Attacks on Enterprise Networks: Hackers Have Pulse Secure, Fortinet VPNs, and Webmin Servers in their Crosshairs ([ZDNet][6])\n\n![Blog Figure #7][7]\n\nVulnerabilities found in these devices were made public earlier this month by researchers \u2013 and the\nattacks didn\u2019t take long to follow. These are considered some of the worst attacks over the past\nyear, due to the highly sensitive nature of the systems they target.\n\n##### Gone in 30 Seconds: Hackers Steal a Tesla from Owner\u2019s Driveway Using a Keyless Hack ([DailyMail][8])\n\n![Blog Figure #9][9]\n\nFootage of hack caught by doorbell camera shows thieves using wires to pick up signal from the car\u2019s\nelectronic key and relay it to the vehicle, which is tricked into thinking the key is in close\nproximity.\n\n##### Buffer overflow (CVE-2019-12527) in Squid Web Proxy Could Allow Hackers to Carry Out Remote Code Execution Attacks ([SCMedia][10])\n\n![Blog Figure #11][11]\n\nBy sending a crafted HTTP request to the targeted server, an attacker can run malicious code\nremotely with the privileges of the server process while an unsuccessful attack will cause a Denial\nof Service condition.\n\nRead the full analysis [here][12].\n\n---\n\n[Read more](/newsletter/2019-08-30-this-week-in-cybersecurity "Read more")\n\n[1]: https://www.zdnet.com/article/a-new-iot-botnet-is-infecting-android-based-set-top-boxes/\n[2]: /static/images/blog/androidaug28.jpg "class:float-left; alt:android"\n[3]: https://www.wootcloud.com/blogs/ars_botnet.html\n[4]:\n https://www.techrepublic.com/article/vm-escape-flaw-in-qemu-allows-for-arbitrary-code-execution-denial-of-service/\n[5]: /static/images/blog/codeaug28.jpg "class:float-left; alt:code"\n[6]:\n https://www.zdnet.com/article/hackers-mount-attacks-on-webmin-servers-pulse-secure-and-fortinet-vpns/\n[7]: /static/images/blog/serveraug28.jpg "class:float-left; alt:servers"\n[8]:\n https://www.dailymail.co.uk/news/article-7380763/Robbers-use-keyless-hack-steal-90-000-Tesla-30-seconds.html?ico=embedded\n[9]: /static/images/blog/teslaaug28.jpg "class:float-left; alt:tesla"\n[10]:\n https://www.scmagazineuk.com/unpatched-squid-flaw-result-dos-remote-code-execution-attacks/article/1594725\n[11]: /static/images/blog/circuitaug28.jpg "class:float-left; alt:circuit"\n[12]:\n https://www.thezdi.com/blog/2019/8/22/cve-2019-12527-code-execution-on-squid-proxy-through-a-heap-buffer-overflow\n'}()},98634:function(e){!function(){"use strict";e.exports='---\nuri: 2019-09-06-this-week-in-cybersecurity\nlogo: /static/images/blog/sept6banner.jpg "random shapes"\nauthor: Karamba Security | September 6th, 2019\ntitle:\n "Vulnerabilities in Medical Devices, a Plea Deal in a Massive Botnet Case, and More: The Top News\n in Product Security for This Past Week"\n\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Hacker Pleads Guilty to Crafting Sartori Botnet that Infected Hundreds of Thousands of IoT Devices ([Ars Technica][1])\n\n![Blog Figure #2][2]\n\nA 21-year-old Washington man and two co-conspirators confessed to creating Sartori and two other\nbotnets that infected more than 800,000 devices, including 32,000 devices belonging to a large\nCanadian ISP. The trio also sold denial of service attacks to the highest bidder.\n\n##### New Malware \u201cBRATA\u201d Targets Brazil-based Android Devices - By Posing as a WhatsApp Update ([SC Magazine][3])\n\n![Blog Figure #4][4]\n\nThe malware poses as a patch meant to fix a buffer overflow vulnerability in WhatsApp that can allow\na remote code execution attack. More than 20 variants have been found so far.\n\n##### Flaw Affecting Supermicro X9-X11 Servers Opens the Door to Remote Attacks ([threatpost][5
1])\n\n![Blog Figure #6][6]\n\nResearchers say the bug allows attackers to attain credentials for the server\u2019s baseboard management\ncontrollers, giving them \u201cvirtually omnipotent control over a server and its contents.\u201d\n\n##### New Advisory Issued for Change Healthcare Cardiology Devices After Vulnerability Found ([US Govt][7])\n\n![Blog Figure #8][8]\n\nWarning from the US Department of Homeland Security says that flaws in cardiology machines could\nallow attackers with local system access to execute unauthorized arbitrary code.\n\n##### Vulnerability Allows Remote Code Execution Attacks on EZAutomation EZPLC ([Zero Day Initiative][9])\n\n![Blog Figure #10][10]\n\nThe flaw requires a user to visit a malicious page or open a dangerous file, and results from\nimproper validation of user-supplied data.\n\n##### Flaw in Philips HDI Ultrasound System Could Allow Hackers Access to Patient Images, Personal Data ([Security Newspaper][11])\n\n![Blog Figure #10][12]\n\nThe flaw requires a user to visit a malicious page or open a dangerous file, and results from\nimproper validation of user-supplied data.\n\n---\n\n[Read more](/newsletter/2019-09-06-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://arstechnica.com/information-technology/2019/09/iot-botnet-creator-cops-plea-to-hacking-more-than-800000-devices/\n[2]: /static/images/blog/sept6virus.jpg "class:float-left; alt:android"\n[3]:\n https://www.scmagazine.com/home/security-news/malware/brata-malware-targeting-brazilian-android-devices/\n[4]: /static/images/blog/sept6whatsapp.jpg "class:float-left; alt:android"\n[5]:\n https://threatpost.com/usbanywhere-bugs-supermicro-remote-attack/147899/?utm_source=newsletter&utm_medium=Email&utm_campaign=tp_daily_digest_3_9_2019\n[6]: /static/images/blog/sept6flaw.jpg "class:float-left; alt:android"\n[7]: https://www.us-cert.gov/ics/advisories/icsma-19-241-01\n[8]: /static/images/blog/sept6heart.jpg "class:float-left; alt:android"\n[9]: https://www.zerodayinitiative.com/advisories/ZDI-19-701/\n[10]: /static/images/blog/sept6bug.jpg "class:float-left; alt:android"\n[11]:\n https://www.securitynewspaper.com/2019/09/04/philips-ultrasound-system-is-easily-hackable-now-criminals-can-modify-your-ultrasound-scans/\n[12]: /static/images/blog/sept6ultrasound.jpg "class:float-left; alt:android"\n'}()},82376:function(e){!function(){"use strict";e.exports='---\nuri: 2019-09-13-this-week-in-cybersecurity\nlogo: /static/images/blog/newslettersept13.jpg "random shapes"\nauthor: Karamba Security | September 13th, 2019\ntitle:\n "Vulnerabilities in IoT Radios, Flaws That Crash Routers En Masse, and Much More: The Top News in\n Product Security for This Past Week"\n\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Telnet Critical Vulnerabilities Found in Telestar IoT Radio Devices Allow Attackers to Remotely Hijack Systems ([ZDNet][1])\n\n![Blog Figure #2][2]\n\nRadios from Telestar\u2019s Imperial & Dabman Series I and D product line can be infiltrated through a\nport scan, the nmap tool, and ncrack. Researchers only needed 10 minutes to brute-force a radio due\nto poor password security. The flaw allows attackers to create a Mirai-like botnet.\n\n##### Flaw in Popular Netgear Router Can Crash Devices with Ease ([The Daily Swig][3])\n\n![Blog Figure #4][4]\n\nResearchers say both vulnerabilities can cause DoS. Both D-Link and Netgear have released security\npatches since disclosure was made.\n\n##### Researchers Find D-Link and Comba Router Vulnerabilities That Can Leak Passwords for Devices ([threatpost][5])\n\n![Blog Figure #6][6]\n\nThe vulnerabilities involve \u201cinsecure storage of credentials, including three where cleartext\ncredentials are available to any user with network access to the device,\u201d according to the\nresearcher who discovered them.\n\n##### Weakness in Intel Chips Gives Attackers the Ability to Steal Data ([Ars Technica][7])\n\n![Blog Figure #8][8]\n\nResearchers say the most dangerous attacks using the vulnerability can take place in data centers\nand cloud environments. They also advise manufacturers to provide better microarchitectural security\nto handle such threats.\n\n##### Hackers use DoS Flaw to Manipulate Firewalls at US Power Grid Operator ([ZDNet][9])\n\n![Blog Figure #10][10]\n\nNorth American Electric Reliability Corporation says in report that hackers managed to repeatedly\ncause firewalls to reboot at a power grid operator for 10 hours. The operator was able to stop the\nreboots after installing a patch that was lacking in the system.\n\n---\n\n[Read more](/newsletter/2019-09-13-this-week-in-cybersecurity "Read more")\n\n[1]: https://www.zdnet.com/article/critical-vulnerabilities-impact-over-a-million-iot-radio-devices/\n[2]: /static/images/blog/radiosept13.jpg "class:float-left; alt:radio"\n[3]:\n https://portswigger.net/daily-swig/serious-vulnerabilities-in-popular-netgear-router-can-crash-your-device\n[4]: /static/images/blog/routersept13.jpg "class:float-left; alt:routers"\n[5]: https://threatpost.com/vulnerabilities-in-d-link-comba-routers-can-leak-credentials/148150/\n[6]: /static/images/blog/hackersept13.jpg "class:float-left; alt:purple square"\n[7]:\n https://arstechnica.com/information-technology/2019/09/weakness-in-intel-chips-lets-researchers-steal-encrypted-ssh-keystrokes/\n[8]: /static/images/blog/intelsept13.jpg "class:float-left; alt:android"\n[9]:\n https://www.zdnet.com/article/cyber-security-incident-at-us-power-gr
1id-entity-linked-to-unpatched-firewalls/?ftag=COS-05-10aaa0g&utm_campaign=trueAnthem%3A+Trending+Content&utm_content=5d7649614b188d00011bf8f9&utm_medium=trueAnthem&utm_source=twitter\n[10]: /static/images/blog/powerplantsept13.jpg "class:float-left; alt:android"\n'}()},76302:function(e){!function(){"use strict";e.exports='---\nuri: 2019-09-20-this-week-in-cybersecurity\nlogo: /static/images/blog/citysep20.jpg "cityscape"\nauthor: Karamba Security | September 20th, 2019\ntitle:\n "A Massive Increase in Attacks on IoT Devices, a New Homeland Security Cybersecurity Warning, and\n Much More: The Top Product Cybersecurity News for This Past Week"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Sharp Spike in Attacks on IoT Devices in First Half of 2019, Report Finds ([HelpNet Security][1])\n\n![Blog Figure #2][2]\n\n\u201cHoneypot\u201d servers set up by F-Secure researchers measured a twelvefold increase in events compared\nto the same period last year. Likely sources of traffic increase include malware such as Mirai.\n\n##### New Guidelines in the Works for IoT Safety in the UK ([Rapid TV News][3])\n\n![Blog Figure #4][4]\n\nDigital TV Group (DTG) plans to launch cyber security conformance guideline which will include\nmaking sure that software components in IoT devices are securely updateable.\n\n##### Two Newly Disclosed Security Flaws Could Allow Attackers to Break Out of Their Hypervisor and Execute Malicious Code ([The Register][5])\n\n![Blog Figure #6][6]\n\nThe first flaw found in [Qemu-KVM][11] (CVE-2019-14835) - Qemu accesses a table in memory that the\nguest VM can write to. An attacker can trigger a buffer overflow and execute malicious code on the\nhost machine outside the hypervisor. The second flaw (CVE-2019-5049) can cause an Out-of-Bounds\nmemory write and affects VMware workstations that run Windows 10 and have AMD Radeon graphics card.\n\n##### More than 100 CVEs Found in 13 Popular Router Models ([threatpost][7])\n\n![Blog Figure #8][8]\n\nVendors affected include Asus, Zyxel, Lenovo, and Netgear, among others. Researchers say every\ndevice tested had at least one web application vulnerability that a hacker
1could use to gain remote\naccess.\n\n##### Flaws Found in CODESYS Products Can Be Exploited for Remote Code Execution Attacks ([Security Week][9])\n\n![Blog Figure #10][10]\n\nUS Department of Homeland Security issues advisories about the vulnerabilities found in CODESYS\nproducts, which are used by third-party vendors for hundreds of industrial products.\n\n---\n\n[Read more](/newsletter/2019-09-20-this-week-in-cybersecurity "Read more")\n\n[1]: https://www.helpnetsecurity.com/2019/09/16/attacks-h1-2019/\n[2]: /static/images/blog/greencodenewsletter.jpg "class:float-left; alt:green code"\n[3]:\n https://www.rapidtvnews.com/2019091457298/dtg-launches-secure-by-design-scheme.html#axzz5zfcMj0l5\n[4]: /static/images/blog/securityprinter.jpg "class:float-left; alt:printers"\n[5]: https://www.theregister.co.uk/2019/09/18/vmware_amd_hypervisor_escapes/\n[6]: /static/images/blog/computerbugnewsletter.jpg "class:float-left; alt:computer bug"\n[7]: https://threatpost.com/asus-lenovo-routers-remotely-exploitable-bugs/148361/\n[8]: /static/images/blog/routernewsletter.jpg "class:float-left; alt:router"\n[9]:\n https://www.securityweek.com/serious-flaws-codesys-products-expose-industrial-systems-remote-attacks\n[10]: /static/images/blog/homelandsep20.jpg "class:float-left; alt:homeland security logo"\n[11]: https://www.theregister.co.uk/2011/07/25/brief_history_of_virtualisation_part_5/?page=2\n'}()},70244:function(e){!function(){"use strict";e.exports='---\nuri: 2019-09-27-this-week-in-cybersecurity\nlogo: /static/images/blog/riceterraces.jpg "rice terraces"\nauthor: Karamba Security | September 20th, 2019\ntitle:\n "IoT Hacking Dominates the Dark Web, Cybersecurity for Medical Devices, and Much More: The Top\n Product Cybersecurity News for This Past Week"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Hacking Routers, Webcams, and Printers are Most Searched Keywords on Dark Web ([Inc42][1])\n\n![Blog Figure #2][2]\n\nResearch finds that in Dark Web forums in five languages, hacking of IoT devices is one of the\nhottest topics of discussion. Most requested hacking methods were for routers, webcams, and\nprinters.\n\n##### More Than 15,000 Webcams Can Be Hijacked Through a Simple Internet Connection ([IT Pro][3])\n\n![Blog Figure #4][4]\n\nWhite hat hacker states that AXIS net cameras, Cisco Linkys webcam, and WebCamXP 5 software are all\nsusceptible to these attacks and can be manipulated remotely by a malicious actor.\n\n##### Cybersecurity of Medical Devices is on FDA\u2019s Agenda ([The National Law Review][5])\n\n![Blog Figure #6][6]\n\nAt meeting, The Patient Engagement Advisory Committee of the Food and Drug Association focused on\nhow to communicate cybersecurity risks to patients, ruling there is no one-size-fits-all approach\nthat is suitable to all patients. The committee also discussed when to disclose cyber risks to the\npublic, so as to not present new attack targets for hackers.\n\n##### New Vulnerability Affecting Cisco Data Center Network Manager Could Allow Remote Code Execution ([SystemTek][7])\n\n![Blog Figure #8][8]\n\nAttacker could exploit vulnerability CVE-2019-1620 by uploading specially crafted data to the\naffected device. If successful, attacker could write arbitrary files on the file system and execute\ncode with root privileges on the affected device.\n\n---\n\n[Read more](/newsletter/2019-09-27-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://inc42.com/buzz/hacking-routers-webcams-printers-are-the-most-searched-keywords-on-the-dark-web/\n[2]: /static/images/blog/darknetnewslettersept27.jpg "class:float-left; alt:green code"\n[3]: https://www.itpro.co.uk/security/34488/thousands-of-webcams-vulnerable-to-attack\n[4]: /static/images/blog/hackernewslettersept27.jpg "class:float-left; alt:printers"\n[5]:\n https://www.natlawreview.com/article/cybersecurity-risks-medical-devices-discussed-recent-fda-meeting\n[6]: /static/images/blog/medicaldevicesnewslettersept27.jpg "class:float-left; alt:computer bug"\n[7]: https://threatpost.com/asus-lenovo-routers-remotely-exploitable-bugs/148361/\n[8]: /static/images/blog/cisconewslettersept27.png "class:float-left; alt:cisco"\n'}()},31302:function(e){!function(){"use strict";e.exports='---\nuri: 2019-10-04-this-week-in-cybersecurity\nlogo: /static/images/blog/newsletteroct4.jpg "blue lines"\nauthor: Karamba Security | October 4th, 2019\ntitle:\n "Targeted Hacks Hit Airbus Suppliers, a New Remote Code Execution Vulnerability in vBulletin, and\n Much More: The Top Product Cybersecurity News for This Past Week"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Researchers reverse engineered Skoda Octavia ([Strath][1])\n\n![Blog Figure #2][2]\n\nResearchers at University of Strathclyde detail how keyfobs, OBD-II flaws, open ports, and other\npoints of weakness make connected vehicles vulnerable. And with more than 10,000,000 lines of code,\nthe attack surface is immense.\n\n##### Series of Targeted Hacks Hit Airbus Suppliers ([France24][3])\n\n![Blog Figure #4][4]\n\nAll four major attacks to hit Airbus over the past 12 months have targeted suppliers in an apparent\nsearch for commercial secrets. Security expert says attacks indicate that hackers are looking for\nweak links in the supply chain to compromise Airbus\u2019s systems.\
1n\n##### New \u2018Gucci\u2019 Malware Targets IoT Devices Across Europe ([Security Week][5])\n\n![Blog Figure #6][6]\n\nSecurity researchers say \u2018Gucci\u2019 botnet can be used to carry out large scale DDoS attacks, and\ntargets multiple architectures, including ARM, x86, MIPS, PPC, and M68K, among others.\n\n##### Day-1 attacks on vBulletin\u2019s New Remote Code Execution Vulnerability ([Security Boulevard][7])\n\n![Blog Figure #8][8]\n\nThe 0-Day vulnerability CVE-2019-16759 was published late last month, and within hours hackers began\nexploiting it. The vulnerability allows a malicious attacker to inject commands and remotely execute\ncode on the application server.\n\n##### Malware Infection Hits Defense Contractor Rheinmetall AG\u2019s Plants Across the World ([ZDNet][9])\n\n![Blog Figure #10][10]\n\nRheinmetall AG three plants in Brazil, Mexico, and the US have been impacted by the malware causing\n\u201csignificant disruption\u201d according to the company. Losses for the company are expected to total in\nthe tens of millions of Euros.\n\n---\n\n[Read more](/newsletter/2019-10-04-this-week-in-cybersecurity "Read more")\n\n[1]: https://strathprints.strath.ac.uk
1/69919/\n[2]: /static/images/blog/skodalogonewsletter.jpg "class:float-left; alt:skoda logo"\n[3]: https://www.france24.com/en/20190926-airbus-hit-by-series-of-cyber-attacks-on-suppliers\n[4]: /static/images/blog/airbuslogonewsletter.jpg "class:float-left; alt:airbus"\n[5]: https://www.securityweek.com/new-gucci-iot-botnet-targets-europe\n[6]: /static/images/blog/iotnewsletter.jpg "class:float-left; alt:iot newsletter"\n[7]:\n https://securityboulevard.com/2019/09/attackers-are-quick-to-exploit-vbulletins-latest-0-day-remote-code-execution-vulnerability/\n[8]: /static/images/blog/newsletterglobe.jpg "class:float-left; alt:globe"\n[9]:\n https://www.zdnet.com/article/malware-infection-disrupts-production-at-defence-contractor-plants-in-three-countries/?ftag=COS-05-10aaa0g&utm_campaign=trueAnthem%3A+Trending+Content&utm_content=5d8f9fc9c82004000186f8bc&utm_medium=trueAnthem&utm_source=twitter\n[10]: /static/images/blog/factories.jpg "class:float-left; alt:factories"\n'}()},74225:function(e){!function(){"use strict";e.exports='---\nuri: 2019-10-10-this-week-in-cybersecurity\nlogo: /static/images/blog/nyskyline.jpg "nyc skyline"\nauthor: Karamba Security | October 10th, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### US Government Warns Impact of Urgent/11 Vulnerabilities Much Broader than Thought ([ZDNet][12])\n\n![Blog Figure #13][13]\n\nDHS and FDA warn that additional testing confirms that [Urgent/11 vulnerabilities][14] affect not\nonly devices that use VxWorks. Testing finds that devices using other operating systems were also\nimpacted, including OSE created by ENEA, INTEGRITY created by Green Hills, Microsoft\'s ThreadX,\nITRON by TRON Forum, Mentor\'s Nucleus RTOS, and ZebOS, a routing platform which provides TCP/IP\nservices for other operating systems.\n\n##### Throw the Whole Router Out the Window: D-link Says it Won\u2019t Issue a Fix for Vulnerability in Aging Devices ([ZDNet][1])\n\n![Blog Figure #2][2]\n\nVulnerability CVE-2019-16920 can allow remote code execution and affects firmware in D-Link routers\nDIR-655, DCIR-866L, DIR-652, and DHP-1562. Due to age of devices, D-Link will not issue a fix,\nmeaning anyone who doesn\u2019t buy a new router will have no protection against exploits of\nCVE-2019-16920.\n\n##### NSA Warns that Nation States are Committing Day 1 Attacks on Leading VPNs ([Search Security][3])\n\n![Blog Figure #4][4]\n\nThree recently found vulnerabilities in VPNs from Pulse Secure, Palo Alto Networks, and Fortinet\ninclude two remote code execution flaws. The US National Security Agency this week urged users to\npatch and mitigate the vulnerabilities that \u201cmultiple nation-state advanced persistent threat (APT)\nactors have weaponized.\u201d\n\n##### Researchers Find Code-Execution Vulnerability in Ghidra ([Security Affairs][5])\n\n![Blog Figure #6][6]\n\nThe Java-based engineering tool\u2019s vulnerability, CVE-2019-16941, could be used by attackers to\nexecute arbitrary code. Researchers say flaw affects Ghidra versions through 9.0.4.\n\n##### Gamers Beware: Two Products Popular with Gamers Have High-Severity Flaws ([threatpost][7])\n\n![Blog Figure #8][8]\n\nA total of four high-severity flaws have been discovered in Intel NUC and Nvidia Shield, which can\nenable code execution, denial of service, escalation of privileges, and information disclosure.\n\n##### Study Finds Stack Overflow Can Introduce Bugs into Software ([Naked Security][9])\n\n![Blog Figure #10][10]\n\nTrusted by coders as a handy time-saver, Stack Overflow can spread insecure code in programs,\naccording to [a new study][11].\n\n---\n\n[Read more](/newsletter/2019-10-10-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://www.zdnet.com/article/d-link-routers-contain-remote-code-execution-vulnerability/#ftag=RSSbaffb68\n[2]: /static/images/blog/routers1newsletter.jpg "class:float-left; alt:routers"\n[3]:\n https://searchsecurity.techtarget.com/news/252472019/NSA-warns-VPN-vulnerabilities-exploited-by-nation-state-hackers\n[4]: /static/images/blog/cyberlock.jpg "class:float-left; alt:cyber attack"\n[5]: https://securityaffairs.co/wordpress/92280/hacking/ghidra-code-execution-flaw.html\n[6]: /static/images/blog/sept6bug.jpg "class:float-left; alt:computer bug"\n[7]: https://threatpost.com/gamers-high-severity-intel-nvidia-flaws/149034/\n[8]: /static/images/blog/gamernewsletter.jpg "class:float-left; alt:gamer"\n[9]:\n https://nakedsecurity.sophos.com/2019/10/09/copy-and-paste-sharing-on-stack-overflow-spreads-insecure-code/\n[10]: /static/images/blog/computercodenewsletter.jpg "class:float-left; alt:computer code"\n[11]: https://arxiv.org/pdf/1910.01321.pdf\n[12]:\n https://www.zdnet.com/article/dhs-and-fda-warn-about-much-broader-impact-of-urgent11-vulnerabilities/\n[13]: /static/images/blog/huawei.jpg "class:float-left; alt:buildings"\n[14]: https://karambasecurity.com/blog/2019-08-08-urgent11-blog\n'}()},86952:function(e){!function(){"use strict";e.exports='---\nuri: 2019-10-17-this-week-in-cybersecurity\nlogo: /static/images/blog/peelingpaint.jpg "peeling paint"\nauthor: Karamba Security | October 17th, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Critical Flaw Exposes Sophos Cyberoam Appliances to Remote Code Execution ([Security Week][3])\n\n![Blog Figure #4][4]\n\nCritical flaw CVE-2019-17059 affects Cyberoam firewalls running CyberoamOS 10.6.6 MR-5 and earlier.\nThere are reportedly over 96,000 internet-exposed Cyberoam appliances, including ones housed by\nenterprises, financial organizations, and educational institutions.\n\n##### Demonstration Shows How Attackers could Remotely Control Buildings ([IoT World Today][5])\n\n![Blog Figure #6][6]\n\nMcAfee researcher shows how the CVE-2019-9569 vulnerability could be exploited to seize control of\nthe enteliBUS control system made by Delta Controls, which operates a wide range of industrial\ncontrol systems.\
1n\n##### Exclusive: U.S. Carried out Secret Cyber Strike on Iran in Wake of Saudi Oil Attack: Officials ([Reuters][11])\n\n![Blog Figure #13][13]\n\nThe impact of the attack could take months to determine. One of the officials said the strike\naffected physical hardware, but did not provide further details.\n\n##### Attacks on IoT Devices Soar in First Half of 2019 ([Dark Reading][1])\n\n![Blog Figure #2][2]\n\n[Study][12] finds 105 million attacks on IoT devices in first six months of 2019, compared to only\n12 million in the first half of 2018.\n\n##### Security Flaw Opens HP Computers to Code Execution Attacks ([threatpost][9])\n\n![Blog Figure #10][10]\n\nVulnerability CVE-2019-6333 is rated as medium severity and affects the open source software Open\nHardware Monitors, which is utilized by tens of millions of computers.\n\n---\n\n[Read more](/newsletter/2019-10-17-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://www.darkreading.com/attacks-breaches/iot-attacks-up-significantly-in-first-half-of-2019/d/d-id/1336096\n[2]: /static/images/blog/purple.jpg "class:float-left; alt:purple code"\n[3]:\n https://www.securityweek.com/critical-flaw-sophos-cyberoam-appliances-allows-remote-code-execution\n[4]: /static/images/blog/goldcircuit.jpg "class:float-left; alt:gold circuit"\n[5]:\n https://www.iotworldtoday.com/2019/10/08/ics-security-attack-enables-remote-control-of-buildings/\n[6]: /static/images/blog/industrial.jpg "class:float-left; alt:port cranes"\n[7]:\n https://www.csoonline.com/article/3445044/critical-remote-code-execution-flaw-fixed-in-popular-terminal-app-for-macos.html\n[8]: /static/images/blog/gamernewsletter.jpg "class:float-left; alt:gamer"\n[9]: https://threatpost.com/hp-touchpoint-analytics-opens-pcs-to-code-execution-attack/149069/\n[10]: /static/images/blog/hp.jpg "class:float-left; alt:hp logo"\n[11]:\n https://www.reuters.com/article/us-usa-iran-military-cyber-exclusive/exclusive-u-s-carried-out-secret-cyber-strike-on-iran-in-wake-of-saudi-oil-attack-officials-say-idUSKBN1WV0EK\n[12]: https://securelist.com/iot-a-malware-story/94451/\n[13]: /static/images/blog/tanker.jpg "class:float-left; alt:oil tanker"\n'}()},25496:function(e){!function(){"use strict";e.exports='---\nuri: 2019-10-24-this-week-in-cybersecurity\nlogo: /static/images/blog/saltflats.jpg "salt flats"\nauthor: Karamba Security | October 24th, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories from this past week in the world of automotive, IoT, Industry\n 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories from this past week in the world of automotive, IoT, Industry 4.0,\nand Enterprise Edge product cybersecurity.\n\n---\n\n##### Critical Linux Wi-Fi Bug Allows System Compromise ([threatpost][1])\n\n![Blog Figure #2][2]\n\nThe critical flaw known as [CVE-2019-17666][11] can facilitate a buffer overflow attack, allowing\nattackers to take over a Linux machine. A patch has yet to be incorporated into the Linux kernel.\n\n##### Confirmed: NordVPN Fell Victim to Hack ([Tech Crunch][3])\n\n![Blog Figure #4][4]\n\nNordVPN found out about the breach months before the company disclosed it this week. NordVPN claims\na zero logs policy, though such a hack could potentially expose user data. Researcher refers to the\nhack findings as \u201ctroubling.\u201d\n\n##### Trend Micro Antivirus Can Be Exploited to Run Malware ([The Register][5])\n\n![Blog Figure #6][6]\n\nFlaw [CVE-2019-9491][12] in the anti-threat toolkit can be exploited to run arbitrary code - if the\nfilename is cmd.exe or regedit.exe.\n\n##### Shhh! Your Smart Speaker Could be Eavesdropping on You ([The Verge][7])\n\n![Blog Figure #8][8]\n\nSecurity researchers find vulnerability affecting both Google and Amazon smart speakers that hackers\ncould exploit in order to eavesdrop on users and record their conversations, or ask for the password\nto their Google account.\n\n##### Microsoft Launches New Tech That Locks Down PC Firmware in Event of an Attack ([Pocket Lint][9])\n\n![Blog Figure #10][10]\n\n\u201cSecured-core PC\u201d is a successor to Secure Boot, and will allow the OS to tell if the machine has\nbooted securely and if the firmware has been compromised. The capability is available in Surface,\nHP, Levovo, Panasonic, and Dell devices.\n\n---\n\n[Read more](/newsletter/2019-10-24-this-week-in-cybersecurity "Read more")\n\n[1]: https://threatpost.com/critical-linux-wi-fi-bug-system-compromise/149325/\n[2]: /static/images/blog/wifi.jpg "class:float-left; alt:wifi"\n[3]: https://techcrunch.com/2019/10/21/nordvpn-confirms-it-was-hacked/\n[4]: /static/images/blog/nordvpn.jpg "class:float-left; alt:nordvpn logo"\n[5]: https://www.theregister.co.uk/2019/10/21/flaw_trend_micro/\n[6]: /static/images/blog/cyberlock.jpg "class:float-left; alt:cyber image"\n[7]:\n https://www.theverge.com/2019/10/21/20924886/alexa-google-home-security-vulnerability-srlabs-phishing-eavesdropping\n[8]: /static/images/blog/securitycameranewsletter.jpg "class:float-left; alt:camera"\n[9]:\n https://www.pocket-lint.com/laptops/news/microsoft/149848-microsoft-s-latest-anti-hacker-tech-locks-down-your-pc-s-firmware\n[10]: /static/images/blog/sept6bug.jpg "class:float-left; alt:computer bug"\n[11]: https://nvd.nist.gov/vuln/detail/CVE-2019-17666\n[12]: https://nvd.nist.gov/vuln/detail/CVE-2019-9491\n'}()},6454:function(e){!function(){"use strict";e.exports='---\nuri: 2019-10-31-this-week-in-cybersecurity\nlogo: /static/images/blog/halloween.jpg "halloween"\nauthor: Karamba Security | October 31st, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the spookiest stories from the week of Halloween in the world of automotive,\n IoT, Industry 4.0, and Enterprise Edge product cybersecurity.\n---\n\nA look at some of the spookiest stories from the week of Halloween in the world of automotive, IoT,\nIndustry 4.0, and Enterprise Edge product cybersecurity.\n\n---\n\n##### Remember the Hack of WhatsApp\u2019s VoIP Stack Vulnerability? Now It\u2019s Heading to Court ([Reuters][1])\n\n![Blog Figure #2][2]\n\nWhatsApp accuses Israeli firm NSO of helping government spies hack into around 1,400 phones of users\nacross the world, including dissidents, journalists, and diplomats. The lawsuit could potentially\nhave major legal ramifications for the industry, regarding the liability platforms like WhatsApp\ncould face as a result of hacks on their users.\n\n##### India\u2019s Largest Nuclear Plant Reportedly Hit by North Korean Malware Attack ([ars technica][3])\n\n![Blog Figure #4][4]\n\nAnalyst says North Korea\u2019s [Dtrack malware][5] was able to get attackers \u201cdomain controller-level\naccess\u201d at the plant. Attack is believed to have targeted research and technical data.\n\n##### Attack on the Servers: Recently Patched Remote Code Execution Targeting Servers En Masse ([ZDNet][8])\n\n![Blog Figure #9][9]\n\nDespite the release of a path, researchers have discovered that the security flaw\n[CVE-2019-11043][10] is being exploited by hackers to take over servers on a large scale.\nResearchers say exploiting the bug is actually a lot easier than you may think.\n\n##### Security Researcher Gains Access to All Xiaomi Connected Feeders Worldwide - By Accident ([The Register][6])\n\n![Blog Figure #7][7]\n\nHow easy is it to access a worldwide network of pet feeders? A lot easier than you may think. One\nresearcher actually stumbled upon the hack by accident, gaining access to around 10,950 of the IoT\npet feeders.\n\n##### Senators Call for Investigation in the Wake of Capital One Data Breach ([infosecurity][11])\n\n![Blog Figure #12][12]\n\nDemocratic senators call for probe of whether or not Amazon Web Services broke the law by failing to\nsecure the infrastru
1cture that was compromised in the Capital One breach, which is believed to have\naffected around 100 million customers in the United States and Canada.\n\n---\n\n[Read more](/newsletter/2019-10-31-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://www.reuters.com/article/us-facebook-cyber-whatsapp-nsogroup/whatsapp-sues-israels-nso-for-allegedly-helping-spies-hack-phones-around-the-world-idUSKBN1X82BE\n[2]: /static/images/blog/whatsapp.jpg "class:float-left; alt:whatsapp"\n[3]:\n https://arstechnica.com/information-technology/2019/10/indian-nuke-plants-network-reportedly-hit-by-malware-tied-to-n-korea/\n[4]: /static/images/blog/nuclear.jpg "class:float-left; alt:nuclear plant"\n[5]:\n https://arstechnica.com/information-technology/2019/09/busy-north-korean-hackers-have-new-malware-to-target-atms/\n[6]:\n https://www.zdnet.com/article/security-researcher-gets-access-to-all-xiaomi-pet-feeders-around-the-world/\n[7]: /static/images/blog/cat.jpg "class:float-left; alt:cat"\n[8]:\n https://www.zdnet.com/article/nasty-php7-remote-code-execution-bug-exploited-in-the-wild/?ftag=COS-05-10aaa0g&utm_campaign=trueAnthem%3A+Trending+Content&utm_content=5db6ae344c15b800014909cc&utm_medium=trueAnthem&utm_source=twitter\n[9]: /static/images/blog/computercodenewsletter.jpg "class:float-left; alt:code"\n[10]: https://bugs.php.net/bug.php?id=78599\n[11]: https://www.infosecurity-magazine.com/news/senators-urge-aws-investigation/\n[12]: /static/images/blog/uscongress.jpg "class:float-left; alt:us congress"\n'}()},4127:function(e){!function(){"use strict";e.exports='---\nuri: 2019-11-07-this-week-in-cybersecurity\nlogo: /static/images/blog/greenmountains.jpg "green mountains"\nauthor: Karamba Security | November 7th, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\n Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\nEnterprise Edge product cybersecurity.\n\n---\n\n##### How to Hack Alexa with a Laser Pointer ([New York Times][1])\n\n![Blog Figure #2][2]\n\nWe all know laser pointers can hijack a house cat\u2019s attention - but it turns out they can do much\nmore. Researchers in Japan and at the University of Michigan reveal how they can seize control of\nGoogle Home, Amazon\u2019s Alexa, or Apple\u2019s Siri, by aiming a laser pointer - and even a simple\nflashlight - at the devices\u2019 microphones from hundreds of feet away. Researchers said once inside\nthey could then hack any digital smart systems attached to the voice-controlled assistants.\n\n##### Amazon Ring Doorbells Exposed Home Wi-Fi Passwords to Hackers ([Tech Crunch][11])\n\n![Blog Figure #12][12]\n\nResearchers say doorbells send owner\'s Wi-Fi password in clear text over the internet, which allows\nnearby hackers to intercept it and gain access to the network, where they can launch larger attacks\nor carry out surveillance.\n\n##### Attackers Exploit Flaws in Cisco Firewalls to Carry Out the First-Ever Hack on a Renewable Energy Provider ([Security Affairs][3])\n\n![Blog Figure #4][4]\n\nUtah-based sPower says the attack did not affect any of their critical control systems or power\ngeneration, but according to CyberScoop, operators at sPower were unable to communicate with a dozen\ngeneration sites for five minute intervals over the course of several hours. Attackers also carried\nout DoS attacks, causing target devices and websites to crash.\n\n##### BlueKeep Remote Code Execution Vulnerability Being Exploited for Crypto Mining ([Bleeping Computer][5])\n\n![Blog Figure #6][6]\n\nResearchers say honeypots have recorded exploits of BlueKeep (CVE-2019-0708), which can spread\nmalware across connected systems without user intervention. Windows released a patch in May, but\nthere is still an unknown number of users who have not updated.\n\n##### Carmakers and Repair Shops Clash over Crash-Prevention Technology ([Auto Blog][11])\n\n![Blog Figure #12][12]\n\nDue to the sophistication of the systems, many automakers say only parts and repairs from their\nauthorized dealers can ensure safety, drawing fire from independent repair shops and suppliers who\nsay they are being locked out.\n\n##### New Variant of IoT Malware Targets Small Business and Home ([Mashviral][7])\n\n![Blog Figure #8][8]\n\nNew version of Gafgyt malware targets Huawei, Realtek, and Zyxel routers, and hijacks them to form\nbotnet armies for DoS attacks.\n\n##### Thousands of QNAP NAS Devices Fall Victim to New Malware ([Security Affairs][9])\n\n![Blog Figure #10][10]\n\n\u201cQSnatch\u201d malware has reportedly hit over 7,000 devices in Germany alone. Once inside a vulnerable\ndevice, the malware injects malicious code to gain reboot persistence.\n\n---\n\n[Read more](/newsletter/2019-11-07-this-week-in-cybersecurity "Read more")\n\n[1]: https://www.nytimes.c
1om/2019/11/04/technology/digital-assistant-laser-hack.html\n[2]: /static/images/blog/laser.jpg "class:float-left; alt:lasers"\n[3]: https://securityaffairs.co/wordpress/93271/hacking/spower-cyber-attack.html\n[4]: /static/images/blog/cisconewslettersept27.png "class:float-left; alt:cisco logo"\n[5]:\n https://www.bleepingcomputer.com/news/security/windows-bluekeep-rdp-attacks-are-here-infecting-with-miners/\n[6]: /static/images/blog/crypto.jpg "class:float-left; alt:crypto"\n[7]:\n http://mashviral.com/this-aggressive-iot-malware-is-forcing-wi-fi-routers-to-join-its-botnet-military/\n[8]: /static/images/blog/routers1newsletter.jpg "class:float-left; alt:routers"\n[9]: https://securityaffairs.co/wordpress/93364/breaking-news/qsnatch-malware-qnap-nas.html\n[10]: /static/images/blog/malwaregreen.jpg "class:float-left; alt:green code"\n[11]: https://techcrunch.com/2019/11/07/amazon-ring-doorbells-wifi-hackers/\n[12]: /static/images/blog/wifi.jpg "class:float-left; alt:wifi"\n'}()},8706:function(e){!function(){"use strict";e.exports='---\nuri: 2019-11-14-this-week-in-cybersecurity\nlogo: /static/images/blog/nightsky.jpg "night sky"\nauthor: Karamba Security | November 14th, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\n Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\nEnterprise Edge product cybersecurity.\n\n---\n\n##### Hypervisor Escape Among 13 Critical Vulnerabilities Patched by Microsoft ([CBR Online][9])\n\n![Blog Figure #10][10]\n\nThe vulnerability in iTunes and Apple iCloud allowed the researchers to infect Windows PCs with\nransomware - without setting off the anti-virus protection. Researchers informed Apple of the\nvulnerability in August and it has since been patched by the company.\n\n##### Cisco Small Business Routers Rife with Security Issues, Researchers Report ([Latest Hacking News][3])\n\n![Blog Figure #4][4]\n\nThree major flaws found in Cisco RV320 and RV325 Dual Gigabit WAN VPN Routers firmware, including\nthe presence of static certificates and keys. The flaws also meant that anyone with access to the\nbase operating system could exploit the vulnerability to gain root access on the target device.\n\n##### Researchers Hack Amazon Echo - and Cash Out Big ([Tech Crunch][7])\n\n![Blog Figure #8][8]\n\nAmat Cama and Richard Zhu of Team Fluoroacetate used an integer overflow exploit against the Amazon\nEcho Show 5 by taking advantage of the older version.\n\n##### Day One Vulnerability in iTunes Exploited by Hackers ([Herald Journalism][1])\n\n![Blog Figure #2][2]\n\nThe vulnerability in iTunes and Applie iCloud allowed the researchers to infect Windows PCs with\nransomware - without setting off the anti-virus protection. Researchers informed Apple of the\nvulnerability in August and it has since been patched by the company.\n\n##### New Android Malware Strain is Especially Hard to Spot and Remove ([Foss Bytes][5])\n\n![Blog Figure #6][6]\n\nXHelper malware makes its way into the device by way of apps installed from a third-party website.\nthe trojan displays popups and notification and the group that created the malware reportedly earns\nmoney based on clicks. The malware is nearly impossible to remove, even if you perform a factory\nreset.\n\n---\n\n[Read more](/newsletter/2019-11-14-this-week-in-cybersecurity "Read more")\n\n[1]: https://heraldjournalism24.com/2019/11/11/hackers-exploit-an-itunes-zeroday-install-ransomware/\n[2]: /static/images/blog/apple.jpg "class:float-left; alt:apple products"\n[3]:\n https://latesthackingnews.com/2019/11/10/multiple-security-issues-detected-in-cisco-small-business-routers-update-now/\n[4]: /static/images/blog/cisconewslettersept27.png "class:float-left; alt:cisco logo"\n[5]: https://fossbytes.com/android-malware-cant-removed-after-factory-reset/\n[6]: /static/images/blog/androidaug28.jpg "class:float-left; alt:crypto"\n[7]: https://techcrunch.com/2019/11/09/browser-bug-amazon-echo-hack/\n[8]: /static/images/blog/amazon.jpg "class:float-left; alt:blue image"\n[9]:\n https://www.cbronline.com/news/microsoft-security-updates-patch-tuesday?utm_source=dlvr.it&utm_medium=twitter\n[10]: /static/images/blog/microsoft.jpg "class:float-left; alt:microsoft logo"\n'}()},82704:function(e){!function(){"use strict";e.exports='---\nuri: 2019-11-21-this-week-in-cybersecurity\nlogo: /static/images/blog/eritrea.jpg "landscape"\nauthor: Karamba Security | November 21st, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\n Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\nEnterprise Edge product cybersecurity.\n\n---\n\n##### Vulnerability in WhatsApp Opens the Door for Code Execution Attacks ([Security Week][1])\n\n![Blog Figure #2][2]\n\nKnown as CVE-2019-11931, the buffer overflow vulnerability can be triggered simply by sending an MP4\nfile via WhatsApp, Facebook reports. The flaw could be used to install malicious apps onto a device.\n\n##### Android Smartphones being Sold with Vulnerabilities Already Installed ([Forbes][3])\n\n![Blog Figure #4][4]\n\nSecurity company Kryptowire reports they have found a total of 146 vulnerabilities affecting Android\nusers, and to make matters worse, the flaws don\u2019t require the user to download a malicious app.\n\n##### Time for a New Router? D-Link Adds More Flawed Routers to No-Fix List ([threatpost][5
1])\n\n![Blog Figure #6][6]\n\nRemote Code Execution flaw affects 13 model D-Link routers, and company said routers won\u2019t be fixed\nbecause they have reached end of life.\n\n##### Critical Android Vulnerability Can Allow Remote Code Execution Attacks ([nowsecure][7])\n\n![Blog Figure #8][8]\n\nResearchers find that Android uses a library based on libpac, which can open up a huge attack\nsurface against a platform app.\n\n---\n\n[Read more](/newsletter/2019-11-21-this-week-in-cybersecurity "Read more")\n\n[1]: https://www.securityweek.com/whatsapp-vulnerability-allows-code-execution-malicious-mp4-file\n[2]: /static/images/blog/sept6whatsapp.jpg "class:float-left; alt:whatsapp logo"\n[3]:\n https://www.forbes.com/sites/daveywinder/2019/11/16/millions-of-android-users-at-risk-from-146-new-vulnerabilities-already-on-smartphones/#93da42d1aff8\n[4]: /static/images/blog/androidaug28.jpg "class:float-left; alt:android logo"\n[5]: https://threatpost.com/d-link-wont-fix-router-bugs/150438/\n[6]: /static/images/blog/hackersept13.jpg "class:float-left; alt:purple cloud"\n[7]:\n https://www.nowsecure.com/blog/2019/11/13/nowsecure-discovers-critical-android-vuln-that-may-lead-to-remote-code-execution/\n[8]: /static/images/blog/sept6bug.jpg "class:float-left; alt:blue image"\n'}()},67447:function(e){!function(){"use strict";e.exports='---\nuri: 2019-11-28-this-week-in-cybersecurity\nlogo: /static/images/blog/thanksgiving.jpg "autumn leaves"\nauthor: Karamba Security | November 28th, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n Happy Thanksgiving! Here\'s a look at some of the top product cybersecurity stories from the past\n week to take you through that turkey coma.\n---\n\nHappy Thanksgiving! Here\'s a look at some of the top product cybersecurity stories from the past\nweek to take you through that turkey coma.\n\n---\n\n##### Insecure Kids Smartwatch Exposes Location of Children ([AVtest][1])\n\n![Blog Figure #2][2]\n\nA cheap smartwatch for kids includes a glaring security flaw - anyone can easily access its back end\nwithout any authorization needed. Once inside, they can get their hands on all types of data -\nincluding the child\u2019s geographical location at that very instant.\n\n##### Russia\u2019s \u2018Sandworm\u2019 Hackers Also Targeted Android Phones ([Wired][7])\n\n![Blog Figure #8][8]\n\nGoogle researchers report that the state-sponsored hackers tried to infect Android apps with malware\nand upload them to the Google Play Store.\n\n##### Critical Flaws in VNC Put Industry 4.0 Machines at Risk ([threatpost][3])\n\n![Blog Figure #4][4]\n\nResearchers find that the open source VNC project used in industrial environments includes 37\ndifferent memory-corruption vulnerabilities, including several that are severe and could be used to\ncarry out remote code execution attacks.\n\n##### Facebook Messenger and Mobility Apps Among Many Found Vulnerable to Remote Code Execution Bugs ([ZDNet][5])\n\n![Blog Figure #6][6]\n\nCybersecurity researchers find that patches issued years ago for popular apps have still not been\nset up for automatic installation on Google Play, potentially leaving users exposed.\n\n##### New Report Outlines the Importance of Security by Design in Smart Cars ([Report][9])\n\n![Blog Figure #10][10]\n\nNew report published this week by Enisa states that manufacturers should consider including a\nsecurity role within the product engineering team and that security be part of planning from the\nvery beginning of the concept phase, among other recommendations.\n\n---\n\n[Read more](/newsletter/2019-11-28-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://www.iot-tests.org/2019/11/product-warning-chinese-childrens-watch-reveals-thousands-of-childrens-data/\n[2]: /static/images/blog/smartwatch.jpg "class:float-left; alt:smartwatch"\n[3]: https://threatpost.com/critical-flaws-vnc-industrial/150568/\n[4]: /static/images/blog/industrial.jpg "class:float-left; alt:industrial machines"\n[5]:\n https://www.zdnet.com/article/popular-apps-on-google-play-linked-to-old-remote-code-execution-bugs/\n[6]: /static/images/blog/googleplay.jpg "class:float-left; alt:google play"\n[7]: https://www.wired.com/story/sandworm-android-malware/\n[8]: /static/images/blog/androidaug28.jpg "class:float-left;
1 alt:android phones"\n[9]: https://www.enisa.europa.eu/publications/enisa-good-practices-for-security-of-smart-cars\n[10]: /static/images/blog/drivingcar.jpg "class:float-left; alt:car on road"\n'}()},93897:function(e){!function(){"use strict";e.exports='---\nuri: 2019-12-05-this-week-in-cybersecurity\nlogo: /static/images/blog/metal.jpg "autumn leaves"\nauthor: Karamba Security | December 5th, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\n Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\nEnterprise Edge product cybersecurity.\n\n---\n\n##### Android \u2018Spoofing\u2019 Bug Helps Target Bank Accounts ([BBC][1])\n\n![Blog Figure #2][2]\n\nCyber criminals can exploit security weakness in Google\u2019s Android software to steal banking logins\nand at least 60 financial institutions have already been targeted.\n\n##### Microsoft Announces New Language for Secure Coding ([ZDNet][3])\n\n![Blog Figure #4][4]\n\nCompany says their \u201cProject Verona\u201d is creating the new language based on Mozilla-developed Rust,\nand it will be open-sourced soon.\n\n##### US Justice Department Issues New Cybersecurity Stipulations to Drone Policy ([The Verge][5])\n\n![Blog Figure #6][6]\n\nUpdated drone policy includes a portion that requires cybersecurity checks.\n\n##### Cyber Attack Leaves Nuclear Power Company Picking Up the Pieces ([Telegraph][7])\n\n![Blog Figure #8][8]\n\nNational Cyber Security Centre has been secretly providing assistance to UK nuclear power company\nwhich has struggled to fix the damages caused by the attack, according to a report from the Nuclear\nDecommissioning Authority.\n\n##### New IoT Security Rating Issued for Manufacturers ([Digital Journal][9])\n\n![Blog Figure #10][10]\n\nNew security rating from the company UL is meant to assess the critical security features of\nconnected products against common attacks and known IoT vulnerabilities.\n\n---\n\n[Read more](/newsletter/2019-12-05-this-week-in-cybersecurity "Read more")\n\n[1]: https://www.bbc.com/news/technology-50605455\n[2]: /static/images/blog/androidaug28.jpg "class:float-left; alt:android"\n[3]:\n https://www.zdnet.com/article/microsoft-were-creating-a-new-rust-based-programming-language-for-secure-coding/?ftag=COS-05-10aaa0g&taid=5de619b0ee0d2300017c88bb&utm_campaign=trueAnthem%3A+Trending+Content&utm_medium=trueAnthem&utm_source=twitter\n[4]: /static/images/blog/coolgreen.jpg "class:float-left; alt: green circuits"\n[5]:\n https://www.theverge.com/2019/11/27/20986092/justice-department-drone-policy-doj-faa-cybersecurity-risks\n[6]: /static/images/blog/drone.jpg "class:float-left; alt:drone"\n[7]: https://www.telegraph.co.uk/business/2019/11/30/cyber-attack-targets-uks-nuclear-industry/\n[8]: /static/images/blog/nuclear.jpg "class:float-left; alt:nuclear"\n[9]:\n http://www.digitaljournal.com/business/new-iot-security-rating-to-meets-regulatory-demands/article/562372#ixzz66E2HegHg\n[10]: /static/images/blog/sept6flaw.jpg "class:float-left; alt:purple"\n'}()},24473:function(e){!function(){"use strict";e.exports='---\nuri: 2019-12-12-this-week-in-cybersecurity\nlogo: /static/images/blog/mountains.jpg "mountains"\nauthor: Karamba Security | December 12th, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\n Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\nEnterprise Edge product cybersecurity.\n\n---\n\n##### FBI Issue New Warning about IoT Hacking Dangers ([Daily Mail][1])\n\n![Blog Figure #2][2]\n\nIn statement this week, the Oregon office of the bureau warns that \u201chackers can use those innocent\ndevices to do a virtual drive-by of your digital life,\u201d and implores consumers to be more vigilant.\n\n##### BMW, Hyundai Hacked by Team Suspected to be Linked to the Vietnamese Government ([ZDNet][7])\n\n![Blog Figure #8][8]\n\nReport in German media states that the hackers were able to install a penetration testing toolkit\nnamed Cobalt Strike on the infected hosts, which they then used as a backdoor into their networks.\n\n##### Researchers Find New Snatch Ransomware That Can Evade Antivirus Detection ([The Hacker News][3])\n\n![Blog Figure #4][4]\n\nNew version of malware reboots infected computers in Safe Mode before encrypting files, to avoid\nantivirus.\
1n\n##### Cyberattack Shuts Down Pensacola City Services Days After Shooting Attack ([WSJ][5])\n\n![Blog Figure #6][6]\n\nMalicious software infected the city\u2019s network for four days before IT professionals were able to\nremove it. Investigators say still unclear if hack is a ransomware attack or if its connected to the\nfatal shooting attack at a Naval base in the city last week.\n\n##### International Law Enforcement Sting Brings Down IM-RAT Malware Creator and Users ([ZDNet][9])\n\n![Blog Figure #10][10]\n\nPolice in 8 countries arrested 14 people including the author of IM-RAT, (\u201cImminent Monitor Remote\nAccess Trojan\u201d) which allows hackers to gain remote control of desktops and webcams. Malware also\nallows key-logging and the use of infected devices as proxies.\n\n---\n\n[Read more](/newsletter/2019-12-12-this-week-in-cybersecurity "Read more")\n\n[1]:\n https://www.dailymail.co.uk/sciencetech/article-7777565/FBI-warns-hackers-use-smart-home-devices-virtual-drive-digital-life.html\n[2]: /static/images/blog/iotnewsletter.jpg "class:float-left; alt:iot"\n[3]: https://thehackernews.com/2019/12/snatch-ransomware-safe-mode.html\n[4]: /static/images/blog/sept6flaw.jpg "class:float-left; alt: purple cloud"\n[5]: https://t.co/65xnJYelsw?amp=1\n[6]: /static/images/blog/newsletterglobe.jpg "class:float-left; alt:globe"\n[7]: https://www.zdnet.com/article/bmw-and-hyundai-hacked-by-vietnamese-hackers-report-claims/\n[8]: /static/images/blog/computercodenewsletter.jpg "class:float-left; alt:nuclear"\n[9]: https://www.zdnet.com/video/authorities-take-down-imminent-monitor-rat-malware-operation/\n[10]: /static/images/blog/malware.jpg "class:float-left; alt:purple"\n'}()},31748:function(e){!function(){"use strict";e.exports='---\nuri: 2019-12-19-this-week-in-cybersecurity\nlogo: /static/images/blog/brushed.jpg "blue pattern"\nauthor: Karamba Security | December 19th, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\n Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\nEnterprise Edge product cybersecurity.\n\n---\n\n##### Flaws in Siemens SPPA-T3000 control system expose power plants to hack ([Security Affairs][1])\n\n![Blog Figure #2][2]\n\nSiemens has informed customers that there are 19 vulnerabilities that affect the SPPA-T3000\napplication server and 35 security issues that affect the SPAA-T3000 MS3000 migration server. Some\nof the vulnerabilities could potential be used to execute arbitrary code on the server.\n\n##### Amazon Vows to Add New Security Features After Hacker Breaks into Ring Camera in 8-year-old Girl\u2019s Bedroom ([Business Insider][3])\n\n![Blog Figure #4][4]\n\nAfter the incident, Amazon said they will \u201ccontinue to introduce additional security features\u201d for\nthe cameras, though they also implied that the breach was due to the user\u2019s security settings, and\nnot a software hack.\n\n##### TP-Link Routers Give Cyberattackers an Open Door to Business Networks ([threatpost][11])\n\n![Blog Figure #12][12]\n\nFirmware vulnerability in TP-Link Archer C5 v4 routers could be exploited to give a hacker remote\nadmin access to the device. The attacker could then potentially move laterally from the router to a\nwider network.\n\n##### Several Critical Vulnerabilities Found in WAGO Controllers ([Security Week][5])\n\n![Blog Figure #6][6]\n\nResearchers find several critical vulnerabilities in programmable logic controllers that can be\nexploited for arbitrary code execution and denial-of-service attacks.\n\n##### California IoT Security Law to go into Effect ([helpnetsecurity][7])\n\n![Blog Figure #8][8]\n\nNew law that goes into effect on January 1st will require manufacturers to provide a \u201creasonable\nsecurity feature\u201d in connected devices.\n\n##### Patches Released for Blink XT2 Camera Vulnerabilities ([ZDNet][9])\n\n![Blog Figure #10][10]\n\nPolice in 8 countries arrested 14 people including the author of IM-RAT, (\u201cImminent Monitor Remote\nAccess Trojan\u201d) which allows hackers to gain remote control of desktops and webcams. Malware also\nallows key-logging and the use of infected devices as proxies.\n\n---\n\n[Read more](/newsletter/2019-12-19-this-week-in-cybersecurity "Read more")\n\n[1]: https://securityaffairs.co/wordpress/95092/ics-scada/siemens-sppa-t3000-flaws.html\n[2]: /static/images/blog/siemensnewsletter.jpg "class:float-left; alt:siemens logo"\n[3]: https://www.businessinsider.com/ring-security-after-hacks-let-strangers-watch-talk-girl-2019-12\n[4]: /static/images/blog/newsletterattacker.jpg "class:float-left; alt: shady guy"\n[5]: https://www.securityweek.com/several-critical-vulnerabilities-found-wago-controllers\n[6]: /static/images/blog/factories.jpg "class:float-left;
1 alt:factories"\n[7]: https://www.helpnetsecurity.com/2019/11/20/california-iot-security-law/\n[8]: /static/images/blog/iotnewsletter.jpg "class:float-left; alt:nuclear"\n[9]:\n https://www.zdnet.com/article/amazon-security-patches-fix-multiple-flaws-exposing-blink-cameras-to-hijacking/\n[10]: /static/images/blog/coolgreen.jpg "class:float-left; alt:circuit"\n[11]: https://threatpost.com/tp-link-routers-cyberattackers-open-door/151254/\n[12]: /static/images/blog/codeaug28.jpg "class:float-left; alt:code"\n'}()},27809:function(e){!function(){"use strict";e.exports='---\nuri: 2019-01-03-this-week-in-cybersecurity\nlogo: /static/images/blog/snowy.jpg "snowy forest"\nauthor: Karamba Security | January 3rd, 2019\ntitle: "What You Need to Know: The Top Product Cybersecurity News This Week"\ndescription:\n A look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\n Enterprise Edge product cybersecurity.\n---\n\nA look at some of the top stories this week in the world of automotive, IoT, Industry 4.0, and\nEnterprise Edge product cybersecurity.\n\n---\n\n##### The Cost of Security? Man Sues Ring After Home Camera Hacked ([The Guardian][1])\n\n![Blog Figure #2][2]\n\nAlabama man says his camera was hacked and used to harass his children. The lawsuit also mentions\nseven other such incidents, including one in which a hacker demanded a ransom of \\$350,000.\n\n##### Online Freight Matching Marketplace Back Online After Ransomware Attack ([DC Velocity][3])\n\n![Blog Figure #4][4]\n\nMalware software virus took down Truckstop.com over the holiday season, forcing company to shut down\nits operations on December 20th, at the peak of the holiday shipping rush. Company did not disclose\nif they paid the hackers or not.\n\n##### Microsoft Secures Court Order to Seize North Korean Cyberattack Domains ([Techradar][5])\n\n![Blog Figure #6][6]\n\nMove follows attacks from a group affiliated with North Korea, which seized user account details to\nsteal data and upload malware.\n\n##### Smartphones at Higher Risk of Hacking in 2020 Report Finds ([Express Computer][7])\n\n![Blog Figure #8][8]\n\nStudy predicts there will be a significant rise in mobile-focused malware and banking Trojans, which\nwill be boosted by Artificial Intelligence.\n\n---\n\n[Read more](/newsletter/2019-01-03-this-week-in-cybersecurity "Read more")\n\n[1]: https://www.theguardian.com/technology/2019/dec/27/ring-camera-lawsuit-hackers-alabama\n[2]: /static/images/blog/smartcamera.jpg "class:float-left; alt:smart camera"\n[3]: https://www.dcvelocity.com/articles/20191231-hackers-used-ransomware-in-truckstop-com-virus/\n[4]: /static/images/blog/truckstop.jpg "class:float-left; alt: truck stop"\n[5]: https://www.techradar.com/sg/news/microsoft-takes-down-50-north-korean-hacking-sites\n[6]: /static/images/blog/laser.jpg "class:float-left; alt:green laser"\n[7]:\n https://www.expresscomputer.in/security/smartphones-face-high-hacking-risk-in-2020-report/44786/\n[8]: /static/images/blog/smartphone.jpg "class:float-left; alt:smart phone"\n'}()}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.