Florida-based phone maker BLU is facing an FTC complaint over allegations it shared detailed personal user data with a third-party firm that included full text messages, call logs and contact lists.
Threatpost | The first stop for security news
Full coverage |
The Merkle |
Researcher Showcases Unauthorized NFC Payments With Cloned Android Device
The Merkle While mobile payments may seem to be all the hype, it is evident there is still a lot of work to be done in the security department. Slawomir Jasek, a renowned security researcher, successfully completed an NFC payment with a cloned smartphone. This … |
Internet-connected industrial devices could be accessible to anyone, with no password, thanks to a coding error by a gateway manufacturer.
Taiwanese firm Advantech patched the firmware in some of its serial-to-IP gateway devices in October to remove a hard-coded SSH (Secure Shell) key that would have allowed unauthorized access by remote attackers.
But it overlooked an even bigger problem: Any password will unlock the gateways, which are used to connect legacy serial devices to TCP/IP and cellular networks in industrial environments around the world.
Researchers from security firm Rapid7 discovered the vulnerability in the revised firmware, version 1.98, released for the Advantech EKI-1322 Internet protocol (IP) gateway which can connect serial and Ethernet devices to a cellular network.
To read this article in full or to leave a comment, please click here