D-Link DIR-X1860 has unspecified vulnerabilities

The D-Link Dir-X1860 is a dual-band router from D-Link China.A security vulnerability exists in the D-Link DIR-X1860, which stems from a reflected cross-site scripting attack in the D-Link DIR-X1860 web application prior to v1.10WWB09 Beta, which can be exploited by an attacker to sending a...

How to Set Up Lock Screens on All Your Devices

Your lock screen stands between your private data and unwelcome visitors—make sure you set it up correctly...

CVE-2021-40412

CVE-2021-40412 affects Reolink RLC-410W (firmware around v3.0.0.136_20121102). The root cause is lack of validation in the device network settings APIs (SetDevName, SetDdns, SetLocalLink) which format OS commands using user-controlled inputs (notably devname). This leads to OS command injection v...

CVE-2021-23236

CVE-2021-23236 is an uncontrollable resource consumption vulnerability in Fresenius Kabi Agilia Connect Infusion System, specifically affecting Agilia Link+ v3.0 and prior variants. Exploitation can interrupt normal device operation, requiring a hard reset (reboot) via a button on the rack system...

Hardcoded credentials

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions V16.20, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions V16.20, CP-8021 MASTER MODULE All versions V16.20, CP-8022 MASTER MODULE WITH GPRS All versions V16.20. An undocumented debug port uses...

CVE-2021-20162

Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the device. For example, /etc/config/cameo contains the admin password in plaintext...

CVE-2020-22061

CVE-2020-22061 affects SUPERAntiSpyware v8.0.0.1050. The issue resides in the driver component saskutil64.sys and permits an attacker with local access to arbitrarily write data to the device via IOCTL 0x9C402140. CVSS data in the record indicates a local, low complexity attack with partial confi...

CVE-2021-45548

CVE-2021-45548 affects a wide range of NETGEAR routers and extenders (e.g., D7800, DM200, EX-series, R-series, WN/RB series) with command injection by an authenticated user. The advisory lists affected versions (e.g., D7800 < 1.0.1.60; EX7300 < 1.0.2.144; R8900 < 1.0.5.26; XR500

IoT SAFE — An Innovative Way to Secure IoT

By the end of 2021, there will be 12 billion connected IoT devices, and by 2025, that number will rise to 27 billion. All these devices will be connected to the internet and will send useful data that will make industries, medicine, and cars more intelligent and more efficient. However, will all...

Your guide to mobile digital forensics

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Security Product Marketing Manager Natalia Godyla talks with Cellebrite Senior Director of...

CVE-2021-40859

Auerswald COMpact 5500R 7.8A and 8.0B devices expose an unauthenticated endpoint at https://192.168.1.2/about_state that enables backdoor access to the web interface and can reset the administrator password. This yields full administrative access and credentials disclosure risk via unauthenticate...

Why Macs are the best, according to Mac expert Thomas Reed: Lock and Code S02E23

In the year 2021, the war for computer superiority has a clear winner, and it is the Macintosh, by Apple. The companys Pro model laptops are finally, belatedly equipped with ports that have been standard in other computers for years. The companys beleaguered "butterfly" keyboard has seemingly bee...

Internet Resilience, Part 2: What It Takes to “Just Work”

One of the greatest signs of the success of the internet as a technology is how little the average person thinks about it. I’m not talking about the content itself. The streaming videos, online shopping sites, news and educational content, workplace productivity tools, and many other pieces of...

Design/Logic Flaw

The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected device could exploit these vulnerabilities...

CVE-2021-38392

The CVE-2021-38392 entry concerns the Boston Scientific Zoom Latitude Programmer/Recorder/Monitor (PRM) Model 3120. The vulnerability is an improper access control that could allow a skilled attacker with physical access to gain access to the device’s hard drive, change the telemetry region, and ...

CVE-2021-38398

CVE-2021-38398 affects Boston Scientific Zoom Latitude Programmer/Recorder/Monitor (PRM) Model 3120. The issue is described as a vulnerability due to reliance on a component that is not updateable, with off-the-shelf software components containing unpatched vulnerabilities. A threat actor with ph...

Boston Scientific Zoom Latitude Programmer/Recorder/Monitor Model 3120 安全漏洞

The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is vulnerable to an encryption error that could...

TangleBot Malware Reaches Deep into Android Device Functions

An Android malware called TangleBot has weaved its way onto the cyber-scene: One that researchers said can perform a bouquet of malicious actions, including stealing personal info and controlling apps and device functions. According to Cloudmark researchers, the newly discovered mobile malware is...

Internet safety tips for kids and teens: A comprehensive guide for the modern parent

When it comes to picking a new device for your child, its often difficult to know where to start. Whether youre looking for a smartphone, a laptop, a gaming device or something else, or even just signing up for an account online, you want to make sure your kids are protected. Its important to get...

WhatsApp to Finally Let Users Encrypt Their Chat Backups in the Cloud

WhatsApp on Friday announced it will roll out support for end-to-end encrypted chat backups on the cloud for Android and iOS users, paving the way for storing information such as chat messages and photos in Apple iCloud or Google Drive in a cryptographically secure manner. The optional feature,...