A week in security (May 3 – 9)

Last week on Malwarebytes Labs, we discussed how Spectre attacks have come back from the dead; why Facebook banned Instragram ads by Signal; we highlighted the differences between the most popular VPN protocols; pointed out that Google is about to start automatically enrolling users in two-step...

Tesla Remotely Hacked from a Drone

This is an impressive hack: Security researchers Ralf-Philipp Weinmann of Kunnamon, Inc. and Benedikt Schmotzle of Comsecuris GmbH have found remote zero-click security vulnerabilities in an open-source software component ConnMan used in Tesla automobiles that allowed them to compromise parked ca...

A week in security (April 26 – May 2)

Last week on Malwarebytes Labs, we looked at which age range is most likely to be targeted by online predators, talked to Malwarebytes CISO John Donovan on our Lock and Code podcast, and explored the latest deepfake happenings. We also dug into a supply chain attack, discussed threats from a...

Tesla cars can be remotely hacked using drone, WIFI dongle

By Waqas Researchers were able to open Tesla Model X’s doors with a remote hack they perform via a DJI Mavic 2 drone carrying a WIFI dongle. This is a post from HackRead.com Read the original post: Tesla cars can be remotely hacked using drone, WIFI dongle...

Microsoft Exchange server, Teams, Zoom, Chrome pwned at Pwn2Own

By Waqas This year, Pwn2Own will have an automotive category as well, mainly for hacking Tesla cars. Participants will be offered $600,000 and a vehicle. This is a post from HackRead.com Read the original post: Microsoft Exchange server, Teams, Zoom, Chrome pwned at Pwn2Own...

Russian hacker pleads guilty to planting malware in Tesla Gigafactory

By Waqas The hacker Egor Igorevich Kriuchkov traveled from Russia to the US in an attempt to recruit Tesla employees to exfiltrate data and extort the company. This is a post from HackRead.com Read the original post: Russian hacker pleads guilty to planting malware in Tesla Gigafactory...

Tesla Ransomware Hacker Pleads Guilty; Swiss Hacktivist Charged for Fraud

The U.S. Department of Justice yesterday announced updates on two separate cases involving cyberattacks—a Swiss hacktivist and a Russian hacker who planned to plant malware in the Tesla company. A Swiss hacker who was involved in the intrusion of cloud-based surveillance firm Verkada and exposed...

Hackers Accessed Security Cameras Inside Tesla and Beyond

Plus: A Molson-Coors hack, Github controversy, and more of the week's top security news...

150,000 Verkada security cameras hacked—to make a point

Hackers were able to gain access to camera feeds from Verkada, a tech company that specializes in video security and physical access control, to demonstrate how prevalent surveillance is, reports say. Unfortunately, it also exposed the inner workings of hospitals, clinics, and mental health...

Hackers access 150,000+ security cameras in massive Verkada hack

By Waqas According to sources, security cameras accessed by hackers belong to prisons, hospitals, and offices of firms like Tesla and Cloudflare. This is a post from HackRead.com Read the original post: Hackers access 150,000+ security cameras in massive Verkada hack...

Breach Exposes Verkada Security Camera Footage at Tesla, Cloudflare

Hackers claim to have breached Silicon Valley startup Verkada to gain unauthorized access to live feeds of 150,000 security cameras. They claim, the hack gave them widespread access to surveillance footage within companies such as Tesla and Cloudflare, as well as hospitals, companies,...

The vulnerability of the DxgkDdiEscape function in NVIDIA GeForce, Quadro, NVS, and Tesla graphics drivers for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the DxgkDdiEscape function in NVIDIA GeForce, Quadro, NVS, and Tesla graphics drivers for Windows operating systems is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service...

The vulnerability of the DxgkDdiEscape function in NVIDIA GeForce, Quadro, and Tesla graphics drivers for Windows operating systems allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the DxgkDdiEscape function in NVIDIA GeForce, Quadro, and Tesla graphics drivers for Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause system failures or gain...

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

Hardcoded credentials

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

CVE-2020-9306

CVE-2020-9306 affects Digi ConnectPort X2e devices (SolarCity/Tesla branding) with hardcoded credentials stored in a .pyc-compiled file used at boot. FireEye analysis shows password_manager.pyc in /WEB/python/ contains five plaintext credentials for the python system user, enabling web and SSH ac...

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)

In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...

Tesla SolarCity Solar Monitoring Gateway Trust Management Issue Vulnerability

Tesla SolarCity Solar Monitoring Gateway is an application from Tesla SolarCity Solar Monitoring Gateway Tesla, USA. Solar equipment is provided. A security vulnerability exists in Tesla SolarCity Solar Monitoring Gateway through 5.46.43, which stems from the use of hardcoded credentials Digi...

Dependency Confusion Supply-Chain Attack Hit Over 35 High-Profile Companies

In what's a novel supply chain attack, a security researcher managed to breach over 35 major companies' internal systems, including that of Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, and achieve remote code execution. The technique, called dependency confusion or a...