Tag: firmware
-
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX.The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report First…
-
Les supermarchés de l’UE paient d’un firmware de réfrigérateur non mis à jour
Tags: firmwareDes centaines de magasins ont subi des pertes se chiffrant en millions d’euros parce qu’ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation. First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/eu-grocers-unpatched-fridge-firmware-french
-
Hackers Turn Low-Cost Android Phones Into Hidden Proxy Botnets Through Preinstalled Malware
Midnight Mimosa, a widespread Android malware campaign, is turning inexpensive smartphones into advertising fraud engines and potential residential proxy nodes by embedding malicious apps in device firmware before purchase. Bitdefender observed thousands of infected devices across more than 150 countries over approximately two years, exposing a persistent compromise that ordinary application removal cannot resolve. The…
-
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Tags: firmwareHundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems. First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/eu-grocers-unpatched-fridge-firmware
-
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner.LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12.The chain was tested on two TV models,…
-
Amazon Fire TV Cube Security Flaws Allow Bootloader Unlocking and Permanent Root Access
A recently released exploit package lets the third-generation Amazon Fire TV Cube gain an unlocked bootloader and persistent root access on firmware version PS7717 or earlier. Developed by XDA developer Pro-me3us, the project targets devices codenamed “gazelle”. It combines temporary privilege escalation with a separate bootloader vulnerability to enable lasting system modifications. This release includes…
-
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies.The activity, which targets Android devices built on MediaTek platforms across several brands, is being tracked by Bitdefender under the moniker Midnight Mimosa.The preinstalled First seen…
-
Android Firmware Malware Uses Ad Fraud and Proxy Botnets to Generate Revenue
Midnight Mimosa, an Android malware campaign embedded in firmware that monetizes compromised smartphones through advertising fraud and residential proxy services. Disclosed on October 8, the operation affected thousands of devices across more than 150 countries over roughly two years, predominantly inexpensive phones built on MediaTek platforms. Unlike malware requiring a malicious download, Midnight Mimosa arrives…
-
Bitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countries
Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign called Midnight Mimosa involving preinstalled Android malware on low-cost phones from different brands that use MediaTek platforms. The malware is built into the device firmware and may be…
-
TP-Link Faces 5 State Lawsuits: Are Its Routers Still Legal in the US?
Five states have sued TP-Link over router security and disclosure claims. Here’s how the lawsuits, FCC restrictions, and firmware vulnerabilities affect existing owners. The post TP-Link Faces 5 State Lawsuits: Are Its Routers Still Legal in the US? appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-tp-link-router-lawsuits-fcc-ban-us/
-
Low-cost Android phones ship with residential proxy malware
A malware campaign dubbed ‘Midnight Mimosa’ has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/low-cost-android-phones-ship-with-residential-proxy-malware/
-
Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones
Low-cost Android phones can arrive already compromised, with malware embedded in their firmware before buyers switch them on. First seen on hackread.com Jump to article: hackread.com/midnight-mimosa-malware-preinstalled-android-phones/
-
Angebliche Premium-Smartphones entpuppen sich als Malware-infizierte Niedrigpreisangebote
Mit kostengünstigen Smartphones laufen Nutzer Gefahr, sich vorinstallierte Malware einzukaufen. Davor warnen die Experten der Bitdefender Labs in einer aktuellen Studie. Im Rahmen der Kampagne ‘Midnight Mimosa” vertreiben Hacker Schadsoftware auf günstigen Android-Smartphones. Die Malware ist dabei Teil der Firmware, läuft mit Privilegien auf Systemebene und lässt sich mit herkömmlichen Methoden nicht entfernen. In der…
-
Jailbreak mit Relapse: GTA 6 wird wohl auf gehackten Playstations nicht laufen
Das kommende GTA 6 verlangt wohl die neue PS5-Firmware 14.10, die einen wichtigen Exploit entfernt. First seen on golem.de Jump to article: www.golem.de/news/jailbreak-mit-relapse-gta-6-wird-wohl-auf-gehackten-playstations-nicht-laufen-2610-213742.html
-
Sicherheitsprobleme – Ältere Grafikkarten von AMD und Nvidia erhalten Updates
GeForce- und Radeon-Grafikkarten älteren Datums erhalten aufgrund von Sicherheitsproblemen unverhoffte Treiber- und Firmware-Updates. First seen on computerbase.de Jump to article: www.computerbase.de/news/grafikkarten/sicherheitsprobleme-aeltere-grafikkarten-von-amd-und-nvidia-erhalten-updates.99658
-
Sicherheitsprobleme Updates für ältere Nvidia GeForce und Radeon RX 7000
GeForce- und Radeon-Grafikkarten älteren Datums erhalten aufgrund von Sicherheitsproblemen unverhoffte Treiber- und Firmware-Updates. First seen on computerbase.de Jump to article: www.computerbase.de/news/grafikkarten/sicherheitsprobleme-aeltere-grafikkarten-von-amd-und-nvidia-erhalten-updates.99658
-
Sony PS5 Relapse Jailbreak Exploit Uses JSC Memory Corruption and Kernel UAF
A newly released PlayStation 5 jailbreak chain, called Relapse, targets PS5 and PS5 Pro consoles running firmware versions 7.00 through 13.60. This jailbreak combines a browser-based JavaScriptCore memory corruption technique with a kernel use-after-free race condition. The project’s source code and documentation outline a two-stage chain that ultimately provides kernel read/write access, allowing affected systems…
-
Critical WatchGuard AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands
WatchGuard has announced the discovery of three high-impact vulnerabilities in its wireless access point platform. Two of these critical issues allow unauthenticated network attackers to gain API access and execute arbitrary operating-system commands. These vulnerabilities affect WatchGuard AP firmware versions 1.0 through 3.4.7 and were addressed in version 3.4.8, which the vendor released as a…
-
Firmware-Security: Warum KI allein nicht reicht
Firmware-Security wird im KI-Zeitalter zur strategischen Aufgabe: Künstliche Intelligenz beschleunigt zwar die Schwachstellensuche, doch erst die Kombination mit deterministischer Analyse, SBOM-Transparenz und automatisiertem Monitoring macht Risiken in Geräten, Maschinen und Anlagen belastbar steuerbar. Management Summary Firmware-Sicherheit wird zur Führungsaufgabe: Cyberrisiken in Geräten, Maschinen und Anlagen betreffen nicht nur IT-Systeme, sondern auch reale Produktions-, Betriebs-… First…
-
BTS #82 Firmware Analysis, Linux Malware, Future of AI
Below the Surface episode 82 was recorded on September 10, 2026, with host Paul Asadoorian joined by Vlad Babkin and Chase Snyder. The conversation moves across several current security stories, but its center of gravity is clear: modern infrastructure depends… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/bts-82-firmware-analysis-linux-malware-future-of-ai/
-
Nintendo Switch Flaw Lets Nearby Attackers Run Code, Steal Data
A newly disclosed Nintendo Switch vulnerability is pushing owners of the original console toward an urgent firmware update, particularly those who tend to play in public spaces. Nintendo confirmed the vulnerability in Nintendo Switch systems in a PDF advisory released Sept. 10, just a day after quietly shipping firmware version 23.0.0 to address the problem.…
-
Sicherheitslücke in Klimaanlage: Midea Portasplit bekommt ein wichtiges Update
Angreifer können die Klimaanlage Midea Portasplit ohne Anmeldung per Bluetooth steuern. Ein neues Firmware-Update korrigiert das. First seen on golem.de Jump to article: www.golem.de/news/klimaanlage-sicherheitsluecke-in-midea-portasplit-wird-geschlossen-2609-212963.html
-
Skullcandy Dime 3 Bluetooth Flaw Lets Nearby Attackers Hijack Audio and Microphone
Skullcandy Dime 3 wireless earbuds have a serious vulnerability related to unauthenticated Bluetooth pairing. This flaw allows nearby attackers to silently pair with the earbuds, disrupt legitimate audio sessions, and potentially capture microphone audio. This issue, tracked as VU#859658 by the CERT Coordination Center, affects the Skullcandy Dime 3 earbuds (model S2DCW) running firmware version…
-
Your Storage Was Hardened Once. It Isn’t Anymore.
Configuration drift: the silent creator of security risk in storage and backup systems. Every storage and backup environment drifts. Firmware updates reset settings back to their defaults. Temporary changes made during an outage never get reverted. A vendor account created… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/your-storage-was-hardened-once-it-isnt-anymore/
-
Unibleed: Wenn ein Wurm ganze Armeen humanoider Roboter kapern kann
Ein Forscher hat die Firmware eines Unitree-Roboters auf Schwachstellen untersucht. Schadcode hätte wohl von Roboter zu Roboter springen können. First seen on golem.de Jump to article: www.golem.de/news/unibleed-wenn-ein-wurm-reihenweise-roboter-kompromittieren-kann-2609-212495.html
-
Hackers Exploiting Internet-Exposed OT, Warns UK NCSC
Industrial Operators Face Growing Risk From Directly Connected Control Devices. Britain’s NCSC warned that rising OT attack activity is making internet-exposed industrial systems an increasingly attractive entry point, as weak credentials, aging firmware and overlooked connections give threat actors simpler routes into operational networks. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/hackers-exploiting-internet-exposed-ot-warns-uk-ncsc-a-32706
-
D-Link DIR-X1860Z Flaws Enable Unauthenticated Admin Password Reset and Wi-Fi Credential Theft
D-Link has released a security update for the DIR-X1860Z router after researchers discovered vulnerabilities that could enable an unauthenticated attacker on the local network to reset the administrator password and retrieve wireless configuration information, including Wi-Fi credentials. The vulnerabilities affect the non-US DIR-X1860Z hardware revision A1/V1.0 running firmware version V1.0.2.220120.165402. D-Link addressed these issues in…
-
D-Link DIR-X1860Z Flaws Enable Unauthenticated Admin Password Reset and Wi-Fi Credential Theft
D-Link has released a security update for the DIR-X1860Z router after researchers discovered vulnerabilities that could enable an unauthenticated attacker on the local network to reset the administrator password and retrieve wireless configuration information, including Wi-Fi credentials. The vulnerabilities affect the non-US DIR-X1860Z hardware revision A1/V1.0 running firmware version V1.0.2.220120.165402. D-Link addressed these issues in…
-
D-Link DIR-X1860Z Flaws Enable Unauthenticated Admin Password Reset and Wi-Fi Credential Theft
D-Link has released a security update for the DIR-X1860Z router after researchers discovered vulnerabilities that could enable an unauthenticated attacker on the local network to reset the administrator password and retrieve wireless configuration information, including Wi-Fi credentials. The vulnerabilities affect the non-US DIR-X1860Z hardware revision A1/V1.0 running firmware version V1.0.2.220120.165402. D-Link addressed these issues in…