Cybellum’s Post

As more medical devices become interconnected and reliant on networked communication, the potential for cyberattacks increases, posing substantial risks to patient safety and data integrity. https://lnkd.in/efVheJAt #cybersecurity #medicaldevices

Medical devices are plugging into healthcare networks like never before. From pumps to scanners, and even your doctor's smartphone, data streams. But with every connection, a new vulnerability opens. #cyber #cybersecurity #cyberattacks #infosec https://lnkd.in/eXz96V_S

The #indiangovernment has issued additional #security #warnings this week, specifically targeting users of #samsunggalaxy phones. The security advisory from the Indian #Computer #Emergency #Response #Team (#CERT-In) highlights multiple vulnerabilities impacting millions of Samsung Galaxy phones, spanning both older and newer models. Issued on December 13, the security alert categorizes the concern as high-risk, emphasizing the urgent need for existing Samsung users to promptly update their phone's #operatingsystems or #firmware. NDTV #cybersecurity #cyberawareness #mobilesecurity https://lnkd.in/gw49PS4J

In this article, we will explore the significance of embedded operating systems for medical devices, evaluation criteria, and the top 10 options available in the market. So, fasten your seat belts and get ready for an enlightening journey! #cybersecurity https://lnkd.in/gkmppA_j

𝐍𝐞𝐰 𝐅𝐥𝐚𝐰𝐬 𝐢𝐧 𝐒𝐨𝐧𝐨𝐬 𝐒𝐦𝐚𝐫𝐭 𝐒𝐩𝐞𝐚𝐤𝐞𝐫𝐬 𝐀𝐥𝐥𝐨𝐰 𝐇𝐚𝐜𝐤𝐞𝐫𝐬 𝐭𝐨 𝐄𝐚𝐯𝐞𝐬𝐝𝐫𝐨𝐩 𝐨𝐧 𝐔𝐬𝐞𝐫𝐬 Cybersecurity researchers have uncovered weaknesses in Sonos smart speakers that could be exploited by malicious actors to clandestinely eavesdrop on users. The vulnerabilities "led to an entire break in the security of Sonos's secure boot process across a wide range of devices and remotely being able to compromise several devices over the air," NCC Group security researchers Alex Plaskett and Robert Herrera said. Successful exploitation of one of these flaws could allow a remote attacker to obtain covert audio capture from Sonos devices by means of an over-the-air attack. They impact all versions prior to Sonos S2 release 15.9 and Sonos S1 release 11.12, which were shipped in October and November 2023. The findings were presented at Black Hat USA 2024. A description of the two security defects is as follows CVE-2023-50809 - A vulnerability in the Sonos One Gen 2 Wi-Fi stack does not properly validate an information element while negotiating a WPA2 four-way handshake, leading to remote code execution CVE-2023-50810 - A vulnerability in the U-Boot component of the Sonos Era-100 firmware that would allow for persistent arbitrary code execution with Linux kernel privileges NCC Group, which reverse-engineered the boot process to achieve remote code execution on Sonos Era-100 and the Sonos One devices, said CVE-2023-50809 is the result of a memory corruption vulnerability in the Sonos One's wireless driver, which is a third-party chipset manufactured by MediaTek. "In wlan driver, there is a possible out of bounds write due to improper input validation," MediaTek said in an advisory for CVE-2024-20018. "This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation." The initial access obtained in this manner paves the way for a series of post-exploitation steps that include obtaining a full shell on the device to gain complete control in the context of root followed by deploying a novel Rust implant capable of capturing audio from the microphone within close physical proximity to the speaker. 𝐒𝐨𝐮𝐫𝐜𝐞: https://lnkd.in/dBviwuW2 #CyberThreats #CyberAwareness #LinkedIn #Redteam #technology #CyberSecurity #EthicalHacking #Networking #NetworkSecurity #FollowMe #CyberCrime #Marketing #InfoSec #ProfessionalNetworking #Motivation #Inspiration #ProfessionalDevelopment #Connect #SecurityTesting #CyberRisk #PenTesting #VulnerabilityManagement #LinkedInInfluencer #LinkedInTips #PersonalBranding #CareerGrowth #Inspiration #Engagement #Visibility #DigitalMarketing #ThreatHunting #SecurityResearch #CyberDefense #ProfessionalDevelopment #Visibility #ContentMarketing #SocialMediaMarketing #LinkedInProfile #ProfileVisit #ProfileViews #ContentMarketing #Toptrending #top #Success #DataBreach

Security myths of Smart Phones debunked https://lnkd.in/eABbZ63y Smart Phones have become a necessity in our lives. But still half of such device users do not know the basics of mobile security and all that revolves around it. In this article, we will try to bust some of the common myths and misconceptions that are circling around smart phones and their usage. Computers are secure than smart phones- If that was the case, then why the former encountered more malware attacks in the year 2020-21 and why is that the latter is not been used for only communications. According to experts, both the gadgets are safe, irrespective of […]

Security myths of Smart Phones debunked https://lnkd.in/e2x-8rwE Smart Phones have become a necessity in our lives. But still half of such device users do not know the basics of mobile security and all that revolves around it. In this article, we will try to bust some of the common myths and misconceptions that are circling around smart phones and their usage. Computers are secure than smart phones- If that was the case, then why the former encountered more malware attacks in the year 2020-21 and why is that the latter is not been used for only communications. According to experts, both the gadgets are safe, irrespective of […]

Security myths of Smart Phones debunked https://lnkd.in/eAf7W2RP Smart Phones have become a necessity in our lives. But still half of such device users do not know the basics of mobile security and all that revolves around it. In this article, we will try to bust some of the common myths and misconceptions that are circling around smart phones and their usage. Computers are secure than smart phones– If that was the case, then why the former encountered more malware attacks in the year 2020-21 and why is that the latter is not been used for only communications. According to experts, both the gadgets are safe, irrespective of […]

Unprotected connected medical devices are easy targets for bad actors. Illumio's latest blog post covers why they're a top cybersecurity concern and why these healthcare organizations need to adopt ZTS to build cyber resilience.

Unprotected connected medical devices are easy targets for bad actors. Illumio's latest blog post covers why they're a top cybersecurity concern and why these healthcare organizations need to adopt ZTS to build cyber resilience.