Tag Archives: devices

Bitdefender finds vulnerabilities in Bosch BCC100 thermostats

Posted on 2024-01-14 by guenni

[German]Security provider Bitdefender has informed me that security researchers in its labs have found vulnerabilities in Bosch BCC100 thermostats. Hackers can use these vulnerabilities to take control of such smart thermostats and gain access to smart home networks. The experts … Continue reading →

Posted in devices, Security | Tagged , | Leave a comment
Advertising

LogoFAIL: Critical vulnerabilities in the UEFI code

Posted on 2023-12-05 by guenni

[German]There are several critical vulnerabilities in the UEFI code of the firmware of various BIOS/UEFI implementations that could be used to inject malware into a system. The whole thing was already announced by the Binarly REsearch Team on November 29, … Continue reading →

Posted in devices, Security, Software | Tagged , , | 2 Comments

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

Cisco: New 0-day vulnerability (CVE-2023-20273) in IOS XE; already being exploited

Posted on 2023-10-23 by guenni

[German]US vendor Cisco has publicly disclosed another 0-day vulnerability (CVE-2023-20273) in IOS XE as of October 20, 2023. This vulnerability is already being exploited in the wild to compromise systems. The vendor plans to provide fixes for the CVE-2023-20198 and … Continue reading →

Posted in devices, Security, Software | Tagged , , | Leave a comment
Advertising

TP-LINK TL-WR840N: Vulnerability allows stack buffer overflow DOS

Posted on 2023-07-20 by guenni

There is a vulnerability in the firmware of the TP-Link router TP-LINK TL-WR840N that allows a remote attacker to perform a stack buffer overflow DOS attack. TP-Link does not want to publish a security advisory for this, but has made … Continue reading →

Posted in devices, Security | Tagged , | Leave a comment

Nexx garage door remote controller: Vulnerability allows access for hackers

Posted on 2023-04-06 by guenni

[German]Anyone who owns a Nexx home automation system and uses it to remotely control their garage doors now has a fat problem. A vulnerability in the Nexx remote control allows hackers to gain unauthorized access to the garage doors. They … Continue reading →

Posted in devices, Security, Software | Tagged , | Leave a comment
Advertising

Security: DJI drones and it's AeroScope vulnerabilities

Posted on 2023-03-06 by guenni

[German]Drones from the Chinese manufacturer DJI have vulnerabilities that allow third parties to read radio traffic and determine the location of the drone pilot. This vulnerability comes from a monitoring feature called AeroScope (DroneID), developed by the manufacturer for "law … Continue reading →

Posted in devices, Security | Tagged , | Leave a comment

D-Link: End of support for mydlink Home and mydlink Baby Monitor Apps and Cloud Services (Dec. 30, 2022)

Posted on 2022-12-30 by guenni

[German]Are you using D-Link products like the mydlink Baby Monitor or mydlink Home. Today, December 30, 2022, vendor D-Link will shut down certain cloud services. The aforementioned devices will then become electronic junk because their functionality will be lost. An … Continue reading →

Posted in Cloud, devices, issue | Tagged , , , | 68 Comments

Anker's Eufy deletes privacy pledges – time to disable cameras?

Posted on 2022-12-19 by guenni

[German]The Anker subsidiary Eufy seems to have removed statements regarding data privacy and the use of surveillance camera data from its documentation and corporate website. This was reported by The Verge, which had asked the provider about the matter. The … Continue reading →

Posted in devices, Security | Tagged , | 1 Comment
Advertising

USB-C port for mobile devices mandatory from December 28, 2024 in European Union

Posted on 2022-12-10 by guenni

[German]The countdown from when the USB-C port becomes mandatory in European Union for mobile devices as a charging port has begun. The EU has set December 28, 2024 as the start date from which this obligation will apply. This implements … Continue reading →

Posted in devices | Tagged | Leave a comment

Anchor Eufy Door Bell security cameras with vulnerabilities, data transferred to the cloud, Homebase 2 also has vulnerabilities

Posted on 2022-11-30 by guenni

[German]Anker Eufy Door Bell security cameras are also sold in Germany. A security researcher has now found several security vulnerabilities in the firmware of the Eufy cameras. These transfer user images and facial recognition data to the cloud without the … Continue reading →

Posted in devices, Security | Tagged , , | Leave a comment