Tag: patching

A survey of penetration testers by Rapid7 finds most organizations are failing to detect malicious activity on their networks. (Image courtesy of Rapid7)

Survey: Hackers for Hire Find Most Networks Easy Prey

In-brief: A survey of penetration testers by Rapid7 finds most organizations are failing to detect malicious activity on their networks. 

Trustwave said that a serious and easy to abuse flaw affects more than 30 models of Netgear routers totaling hundreds of thousands of devices, globally.

NetGore: Simple Flaw Affects Hundreds of Thousands of Netgear Devices

In-brief: Weeks after the Federal Trade Commission sued the firm D-Link for weak security in its broadband routers, dozens of routers made by the firm NetGear are reported to also be vulnerable to trivial hacking attacks. Small businesses including restaurants and cafés are heavy users of the devices and may be particularly vulnerable, according to experts at the firm Trustwave.

A Twitter message from Ken Munro of Pen Test Partners showing the list of pre-configured administrator passwords for ZySecurity devices.

Mirai Redux: A Year’s Worth of DVR Passwords Published Online

In-brief: DVRs pre-programmed with a list of date-specific master passwords that leaked online may have ties back to Xiongmai Technologies, the same firm whose software was compromised by the Mirai botnet. 

St. Jude issued a software fix for its Merlin@ home product Monday, which is used to manage implantable defibrillators and other implantable medical devices.

St. Jude Patches Hole that allowed Medical Device Hacks

In-brief: St. Jude Medical said on Monday that it patched a serious hole in a product used to program implantable medical devices like defibrillators. But researchers and a Wall Street investment firm say the company still has more holes to close. 

The FTC filed suit against home networking gear maker D-Link alleging the company's products are insecure. (Image courtesy of D-Link.)

FTC Sues D-Link Citing Security Flaws in Routers, Cameras

In-brief: The FTC filed suit against home networking gear maker D-Link alleging the company’s products are insecure and pose a danger to consumers. (Editor’s note: updated to include D-Link’s official statement on the FTC case. – PFR 1/10/2017)