Netgear Zero-Day Allows Full Takeover of Dozens of Router Models – Threatpost
Netgear Zero-Day Allows Full Takeover of Dozens of Router Models Threatpost
“zero day exploit” – read more
Netgear Zero-Day Allows Full Takeover of Dozens of Router Models Threatpost
“zero day exploit” – read more
Criminals are exploiting critical flaws to corral Internet-of-things devices from two different manufacturers into botnets that wage distributed denial-of-service attacks, researchers said this week. Both DVRs from Lilin and storage devices from Zyxel are affected, and users should install updates as soon as possible.
Multiple attack groups are exploiting the Lilin DVR vulnerability to conscript them into DDoS botnets known as FBot, Chalubo, and Moobot, researchers from security firm Qihoo 360 said on Friday. The latter two botnets are spinoffs of Mirai, the botnet that used hundreds of thousand of IoT devices to bombard sites with record-setting amounts of junk traffic.
The DVR vulnerability stems from three flaws that allow attackers to remotely inject malicious commands into the device. The bugs are: (1) hard-coded login credentials present in the device, (2) command-injection flaws, and (3) arbitrary file reading weaknesses. The injected parameters affect the device capabilities for file transfer protocol, network time protocol, and the update mechanism for network time protocol.
Read 4 remaining paragraphs | Comments
Dozens of Lawyers Vie to Lead Data Breach Case Against Marriott Law.com
The fight over who will lead class actions brought over Marriott’s data breach began Friday, when dozens of lawyers submitted applications for leadership …