Security Alerts & News
by Tymoteusz A. Góral

History
#1779 Backdoor accounts found in 80 Sony IP security camera models
Many network security cameras made by Sony could be taken over by hackers and infected with botnet malware if their firmware is not updated to the latest version.

Researchers from SEC Consult have found two backdoor accounts that exist in 80 models of professional Sony security cameras, mainly used by companies and government agencies given their high price.

One set of hard-coded credentials is in the Web interface and allows a remote attacker to send requests that would enable the Telnet service on the camera, the SEC Consult researchers said in an advisory Tuesday.

The second hard-coded password is for the root account that could be used to take full control of the camera over Telnet. The researchers established that the password is static based on its cryptographic hash and, while they haven’t actually cracked it, they believe it’s only a matter of time until someone does.
Read more
#1785 Buffer overflow in BSD libc library patched
#1784 Phishing made easy: Time to rethink your prevention strategy? (PDF)
#1783 Phishing-as-a-service is making it easier than ever for hackers to steal your data
#1782 Millions exposed to malvertising that hid attack code in banner pixels
#1781 Hackers gamify DDoS attacks with collaborative platform
#1780 Critical vulnerability patched in Roundcube webmail
#1779 Backdoor accounts found in 80 Sony IP security camera models
History
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12