Security Alerts & News
by Tymoteusz A. Góral

#1793 Sony closes backdoors in IP-enabled cameras
Sony, in late November, provided a firmware update for a popular IP-enabled camera line used by enterprises and law enforcement alike that closed off remote administration backdoors. The backdoors could be abused to draft these devices into botnets or allow for manipulation of images and advancement into the network.

The update for the Sony IPELA Engine IP Cameras was made available Nov. 28, more than a month after it was privately disclosed by SEC-Consult researcher Stefan Viehbock.

“An attacker can use cameras to take a foothold in a network and launch further attacks, disrupt camera functionality, send manipulated images/video, add cameras into a Mirai-like botnet or to just simply spy on you,” SEC-Consult wrote today in its public disclosure. The company said 80 different Sony cameras were backdoored.
Read more
#1793 Sony closes backdoors in IP-enabled cameras
#1792 Researchers find fresh fodder for IoT attack cannons
#1791 Zeus variant ‘Floki bot’ targets PoS data
#1790 Bluetooth 5 official: Faster data transfer, increased range for seamless IoT
#1789 PowerShell threats surge: 95.4 percent of analyzed scripts were malicious
#1788 Goldeneye ransomware: the resumé that scrambles your computer twice
#1787 Here are some best practices for preventing DDoS attacks
#1786 Ransomware gives free decryption keys to victims who infect others
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12