Some of Our Sources
- BoingBoing
- TutsPlus - Code
- The Logo Smith
- Vandelay Design
- Creative Curio
- Fuel Your Creativity
- Web Design Ledger
- Specky Boy
- Dev To
- Hashedout
Help Webnuz
Referal links:
October 11, 2018 07:26 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/GnviQmAx8_8/over-nine-million-cameras-and-dvrs-open-to-apts-botnet-herders-and-voyeurs
Over Nine Million Cameras and DVRs Open To APTs, Botnet Herders, and Voyeurs
Millions of security cameras, DVRs, and NVRs contain vulnerabilities that can allow a remote attacker to take over devices with little effort, security researchers have revealed today. From a report: All vulnerable devices have been manufactured by Hangzhou Xiongmai Technology Co., Ltd. (Xiongmai hereinafter), a Chinese company based in the city of Hangzhou. But end users won't be able to tell that they're using a hackable device because the company doesn't sell any products with its name on them, but ships all equipment as white label products on which other companies put their logo on top. Security researchers from EU-based SEC Consult say they've identified over 100 companies that buy and re-brand Xiongmai devices as their own. All of these devices are vulnerable to easy hacks, researchers say. The source of all vulnerabilities is a feature found in all devices named the "XMEye P2P Cloud." The XMEye P2P Cloud works by creating a tunnel between a customer's device and an XMEye cloud account. Device owners can access this account via their browser or via a mobile app to view device video feeds in real time. SEC Consult researchers say that these XMEye cloud accounts have not been sufficiently protected. For starters, an attacker can guess account IDs because they've been based on devices' sequential physical addresses (MACs). Second, all new XMEye accounts use a default admin username of "admin" with no password.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/GnviQmAx8_8/over-nine-million-cameras-and-dvrs-open-to-apts-botnet-herders-and-voyeurs
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot