Tag: firmware
- 
		
		
		Bulletins: Vulnerability Summary for the Week of March 10, 2025Source URL: https://www.cisa.gov/news-events/bulletins/sb25-076 Source: Bulletins Title: Vulnerability Summary for the Week of March 10, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 1E–1E Client Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged… 
- 
		
		
		Alerts: CISA and Partners Release Cybersecurity Advisory on Medusa RansomwareSource URL: https://www.cisa.gov/news-events/alerts/2025/03/12/cisa-and-partners-release-cybersecurity-advisory-medusa-ransomware Source: Alerts Title: CISA and Partners Release Cybersecurity Advisory on Medusa Ransomware Feedly Summary: Today, CISA—in partnership with the Federal Bureau of Investigation (FBI) and Multi-State Information Sharing and Analysis Center (MS-ISAC)—released joint Cybersecurity Advisory, #StopRansomware: Medusa Ransomware. This advisory provides tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), and detection… 
- 
		
		
		The Register: Expired Juniper routers find new life – as Chinese spy hubsSource URL: https://www.theregister.com/2025/03/12/china_spy_juniper_routers/ Source: The Register Title: Expired Juniper routers find new life – as Chinese spy hubs Feedly Summary: Fewer than 10 known victims, but Mandiant suspects others compromised, too Chinese spies have for months exploited old Juniper Networks routers, infecting the buggy gear with custom backdoors and gaining root access to the compromised… 
- 
		
		
		Cloud Blog: Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper RoutersSource URL: https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-targets-juniper-routers/ Source: Cloud Blog Title: Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers Feedly Summary: Written by: Lukasz Lamparski, Punsaen Boonyakarn, Shawn Chew, Frank Tse, Jakub Jozwiak, Mathew Potaczek, Logeswaran Nadarajan, Nick Harbour, Mustafa Nasser Introduction In mid 2024, Mandiant discovered threat actors deployed custom backdoors on Juniper Networks’ Junos… 
- 
		
		
		NCSC Feed: ROCA: Infineon TPM and Secure Element RSA Vulnerability GuidanceSource URL: https://www.ncsc.gov.uk/guidance/roca-infineon-tpm-and-secure-element-rsa-vulnerability-guidance Source: NCSC Feed Title: ROCA: Infineon TPM and Secure Element RSA Vulnerability Guidance Feedly Summary: Guidance for those who want to understand and reduce the impact of the ROCA vulnerability. AI Summary and Description: Yes Summary: The provided text discusses the implementation and vulnerabilities of Trusted Platform Modules (TPMs) and Secure Elements… 
- 
		
		
		Hacker News: Espressif’s Response to Undocumented Commands in ESP32 Bluetooth by TarlogicSource URL: https://www.espressif.com/en/news/response_esp32_bluetooth Source: Hacker News Title: Espressif’s Response to Undocumented Commands in ESP32 Bluetooth by Tarlogic Feedly Summary: Comments AI Summary and Description: Yes Summary: Espressif addresses concerns regarding claims of a “backdoor” in its ESP32 chips, clarifying that the reported internal debug commands do not pose a security threat. The company emphasizes its… 
- 
		
		
		Hacker News: Evolving Agents – AI Agents That Communicate, Collaborate, and Improve over TimeSource URL: https://github.com/matiasmolinas/evolving-agents Source: Hacker News Title: Evolving Agents – AI Agents That Communicate, Collaborate, and Improve over Time Feedly Summary: Comments AI Summary and Description: Yes Summary: The Evolving Agents Framework provides a comprehensive solution for creating and managing AI agents with sophisticated communication capabilities. Its emphasis on intelligent agent evolution and cross-framework compatibility… 
- 
		
		
		Slashdot: Undocumented ‘Backdoor’ Found In Chinese Bluetooth Chip Used By a Billion DevicesSource URL: https://hardware.slashdot.org/story/25/03/08/2027216/undocumented-backdoor-found-in-chinese-bluetooth-chip-used-by-a-billion-devices?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Undocumented ‘Backdoor’ Found In Chinese Bluetooth Chip Used By a Billion Devices Feedly Summary: AI Summary and Description: Yes Summary: The discovery of an undocumented backdoor in the widely used ESP32 microchip by researchers from Tarlogic Security highlights significant security vulnerabilities in IoT devices. This backdoor could facilitate various… 
- 
		
		
		Hacker News: Undocumented backdoor found in Bluetooth chip used by a billion devicesSource URL: https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion-devices/ Source: Hacker News Title: Undocumented backdoor found in Bluetooth chip used by a billion devices Feedly Summary: Comments AI Summary and Description: Yes Summary: The discovery of an undocumented backdoor in the widely used ESP32 microchip presents significant security risks, especially in IoT devices. This backdoor allows for device spoofing, unauthorized access,… 
- 
		
		
		The Register: The Badbox botnet is back, powered by up to a million backdoored AndroidsSource URL: https://www.theregister.com/2025/03/07/badbox_botnet_returns/ Source: The Register Title: The Badbox botnet is back, powered by up to a million backdoored Androids Feedly Summary: Best not to buy cheap hardware and use third-party app stores if you want to stay clear of this vast ad fraud effort Human Security’s Satori research team says it has found a…