How much can you trust your printer?

In this interview with Help Net Security, Scott Best, Director of anti-tamper security technology at Rambus, talks about what organizations should be aware of when it comes to printer security and what they should do to remain secure. Printers often go… Continue reading How much can you trust your printer?

150+ HP multifunction printers open to attack (CVE-2021-39237, CVE-2021-39238)

Over 150 HP multifunction printers (MFPs) are open to attack via two exposed physical access port vulnerabilities (CVE-2021-39237) and two different font parsing vulnerabilities (CVE-2021-39238) discovered by F-Secure security consultants Timo Hirvonen… Continue reading 150+ HP multifunction printers open to attack (CVE-2021-39237, CVE-2021-39238)

Office printers: The ticking IT time bomb hiding in plain sight

Office printers don’t have to be security threats: with foresight and maintenance they’re very easily threat-proofed. The problem is that system administrators rarely give the humble printer (or scanner, or multifunction printer) much attention. But ha… Continue reading Office printers: The ticking IT time bomb hiding in plain sight

Researchers uncover over 35 vulnerabilities in six leading enterprise printers

NCC Group researchers have uncovered significant vulnerabilities in six commonly used enterprise printers, highlighting the vast attack surface that can be presented by internet-connected printers. The research Daniel Romero, managing security consulta… Continue reading Researchers uncover over 35 vulnerabilities in six leading enterprise printers

Hackers can compromise your network just by sending a Fax

What maximum a remote attacker can do just by having your Fax machine number?

Believe it or not, but your fax number is literally enough for a hacker to gain complete control over the printer and possibly infiltrate the rest of the network connected t… Continue reading Hackers can compromise your network just by sending a Fax

Criminals can compromise company networks by sending malicious faxes

Check Point has revealed details about the two critical remote code execution vulnerabilities (CVE-2018-5924, CVE-2018-5925) it discovered in the communication protocols used in tens of millions of fax devices globally. A fax number is all an attacker … Continue reading Criminals can compromise company networks by sending malicious faxes

HP plugs critical RCE flaws in InkJet printers

HP has plugged two critical vulnerabilities (CVE-2018-5924, CVE-2018-5925) affecting many of its InkJet printers and is urging users to implement the provided firmware updates as soon as possible. The vulnerabilities, discovered and reported by a still… Continue reading HP plugs critical RCE flaws in InkJet printers

Researchers release app that masks printers’ tracking dots

Did you know that nearly all modern color laser printers put tracking patterns of tiny yellow dots on each piece of paper they print? Most printer manufacturers include these yellow dot patterns, which reveal information such as the serial number of th… Continue reading Researchers release app that masks printers’ tracking dots

Remotely Exploitable Flaw Found In HP Enterprise Printers—Patch Now

Security researchers have discovered a potentially dangerous vulnerability in the firmware of various Hewlett Packard (HP) enterprise printer models that could be abused by attackers to run arbitrary code on affected printer models remotely.

The vulne… Continue reading Remotely Exploitable Flaw Found In HP Enterprise Printers—Patch Now