🚀 Medial Secures Investment on Shark Tank India - Fueling the Future of Professional Social Networking. 🔥
Login

News on Medial

Related News

Critical vulnerability affecting most Linux distros allows for bootkits

ArstechnicaArstechnica · 1y ago
Critical vulnerability affecting most Linux distros allows for bootkits
Medial

Linux developers are working to fix a high-severity vulnerability that can enable the installation of malware at the firmware level, making it difficult to detect or remove. The vulnerability is found in "shim," a component that runs during the boot process before the operating system starts. It plays a crucial role in secure boot, a protection feature in most devices to ensure every link in the boot process is verified. Successful exploitation of the vulnerability allows attackers to execute malicious firmware during the earliest stages of booting, undermining the secure boot mechanism. The vulnerability requires compromising the targeted device or the server/network the device boots from.

Backdoored firmware lets China state hackers control routers with “magic packets”

ArstechnicaArstechnica · 1y ago
Backdoored firmware lets China state hackers control routers with “magic packets”
Medial

Chinese government-backed hackers are infiltrating the networks of multinational companies in the US and Japan by planting malware into routers, according to government advisories. The hacking group, known as BlackTech, has been operating since at least 2010 and has a history of targeting public organizations and private companies. These hackers gain control of network devices used by subsidiaries, install malicious firmware, and use the compromised routers to infiltrate the networks of trusted companies. Cisco routers are predominantly affected, but newer models equipped with secure boot capabilities are less vulnerable. Traditional detection techniques may not be effective against this malware.

Actively exploited 0-days in Ivanti VPN are letting hackers backdoor networks

ArstechnicaArstechnica · 1y ago
Actively exploited 0-days in Ivanti VPN are letting hackers backdoor networks
Medial

Multiple zero-day vulnerabilities have been identified in Ivanti Connect Secure, a widely used virtual private network (VPN) appliance, allowing threat actors to bypass two-factor authentication and execute malicious code within targeted networks. Tracked as CVE-2023-846805 and CVE-2024-21887, these vulnerabilities have been actively exploited by unidentified threat actors. The compromised appliance was used to steal configuration data, modify files, download remote files, and gain unauthorized access to internal systems. Researchers suspect that a Chinese nation-state-level threat actor is behind the attacks. Mitigation measures are advised, as there is potential for widespread exploitation if the vulnerabilities are not addressed promptly.

Download the medial app to read full posts, comements and news.