Report: Most Popular Home Routers Have ‘Critical’ Flaws

Common devices from Netgear, Linksys, D-Link and others contain serious security vulnerabilities that even updates don’t fix. Continue reading Report: Most Popular Home Routers Have ‘Critical’ Flaws

NETGEAR’s new Orbi Mesh System is designed to deliver whole home WiFi 6 mesh to more households

NETGEAR is introducing the next WiFi 6 member of the Orbi Mesh WiFi family, NETGEAR Orbi WiFi 6 AX4200 Tri-band Mesh Systems (RBK752/753). Joining the flagship Orbi WiFi 6 AX6000 Tri-band Mesh System (RBK852), this new Orbi Mesh System, with its attrac… Continue reading NETGEAR’s new Orbi Mesh System is designed to deliver whole home WiFi 6 mesh to more households

Netgear Zero-Day Allows Full Takeover of Dozens of Router Models

An unpatched vulnerability in the web server of device firmware gives attackers root privileges, researchers said. Continue reading Netgear Zero-Day Allows Full Takeover of Dozens of Router Models

Netgear moves to plug vulnerability in routers after researchers find zero-day

A newly discovered software vulnerability could allow hackers to remotely exploit home internet routers, offering a foothold for breaking into the devices running on those networks. Researchers say the flaw in routers made by Netgear — revealed this week by cybersecurity company GRIMM and Trend Micro’s Zero Day Initiative (ZDI) — underscores the long-running challenge of improving security in a market that prizes affordable and functional networking equipment. Netgear told CyberScoop on Wednesday that it was close to releasing a patch for the vulnerability. The flaw affects how Netgear devices handle incoming data and could let hackers who manage to connect to the router to bypass its authentication process using a software exploit. The router could then be a pathway to other devices, such as a laptop housing sensitive work information. (Breaking into the laptop would likely require an additional exploit.) The findings show how the potential impact of a bug can grow as investigations proceed. Researchers initially singled out […]

The post Netgear moves to plug vulnerability in routers after researchers find zero-day appeared first on CyberScoop.

Continue reading Netgear moves to plug vulnerability in routers after researchers find zero-day

Researchers uncover 125 vulnerabilities across 13 routers and NAS devices

In a cybersecurity study of network attached storage (NAS) systems and routers, Independent Security Evaluators (ISE) found 125 vulnerabilities in 13 IoT devices, reaffirming an industrywide problem of a lack of basic security diligence. The vulnerabil… Continue reading Researchers uncover 125 vulnerabilities across 13 routers and NAS devices

Security Camera Firm Arlo Zaps High-Severity Bugs

Bugs in Arlo Technologies’ equipment allow a local attacker to take control of Alro wireless home video security cameras. Continue reading Security Camera Firm Arlo Zaps High-Severity Bugs

Newly reported flaws in cameras, locks add to scrutiny of smart-home security

Homeowners trying to protect their property with surveillance cameras and smart locks may have actually made their households more vulnerable, according to security flaws unveiled by separate teams of researchers Tuesday. The Netgear Arlo system, which the company says streams more than 100 million videos every day, and certain types of Zipato smart hubs, which can lock or unlock doors, are affected by security flaws detailed in unrelated announcements from Tenable and researchers Chase Dardaman and Jason Wheeler, respectively. The discoveries again demonstrate how the same technology that promises to make life more convenient and secure also can put consumers at risk. Patches are available for both vulnerabilities, and hackers would need physical access in both cases to carry out attacks. The weakness in the Arlo devices could allow malicious outsiders to take control of all the cameras connected to a single hub, at which point they could disable the video […]

The post Newly reported flaws in cameras, locks add to scrutiny of smart-home security appeared first on CyberScoop.

Continue reading Newly reported flaws in cameras, locks add to scrutiny of smart-home security

Most home routers lack simple Linux OS hardening security

A new assessment of 28 popular models for home users failed to find a single one with firmware that had fully enabled underlying security hardening features offered by Linux. Continue reading Most home routers lack simple Linux OS hardening security