Giuseppe Pacelli

Hacking Synology BC500: From UART to unauthenticated remote code execution (RCE) 👨🏻‍💻📽️🪛💉🪰 Security researcher Emanuele Barbeno shared details last year about the security research he and his colleagues conducted on a web camera from Synology. This presentation, published just last month, is quite interesting. As usual, the story begins with UART and firmware analysis and ends with a serious vulnerability. The camera's root account was locked but all cameras shared a default root password set to "12345" (!!!) Once researchers enabled the root account via their exploit, that predictable password let them log in over SSH/telnet. More details: Now I See You: Pwning The Synology BC500 Camera [Youtube]: https://lnkd.in/dvyqGy5Z #hacking #cybersecurity #synology #webcam #password #ssh #telnet #infosec #technology #exploit #pwn2own #embedded #uart #cyber #research

611

8 Kommentare

#CYDCampusConference2025 We were happy to welcome Tobias Castagna, the Head of Test Experts at National Test Institute for Cyber Security NTC for a talk on "Hidden Attack Surface: How Overlooked Vulnerabilities Expose Switzerland to Cyber Operations".    Tobias Castagna talked about how the National Test Institute for Cyber Security NTC is tackling critical security gaps in Switzerland where market incentives fall short, providing a vital public service by testing products that often lack financial viability for rigorous security audits. He detailed the necessity of this work, highlighting how the rapid decentralization of Switzerland's energy grid, with solar installations on private roofs, introduces cyber risks from countless distributed providers with limited security knowledge. The National Test Institute for Cyber Security NTC directly addresses this by testing solar production components, alongside a wide range of devices from peripheral hardware (keyboards, monitors) to consumer software like TikTok and Temu, ensuring digital safety extends to every corner of daily life.     The critical nature of this mission was illustrated by their work with hospital equipment, where the National Test Institute for Cyber Security NTC quickly discovered and reported three vulnerabilities of the highest criticality, allowing the institution to secure its systems before potential exploitation. Because security is a collective benefit, the National Test Institute for Cyber Security NTC maximizes its impact by publishing comprehensive reports of its findings in multiple languages. This open disclosure ensures that manufacturers, organizations, and the public can benefit immediately from their deep, independent security expertise, ultimately strengthening the resilience of Switzerland's digital and physical infrastructures. 

104

1 Kommentar

#Cybersecurity | 𝗗𝗶𝘀𝗰𝗼𝘃𝗲𝗿𝘆 𝗼𝗳 𝗡𝗲𝘄 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗶𝗻 𝗜𝗻𝘁𝗲𝗹 𝗣𝗿𝗼𝗰𝗲𝘀𝘀𝗼𝗿𝘀 | Researchers at ETH Zürich, led by Dr. Sandro R., Dr. Johannes Wikner, and Assistant Professor Kaveh Razavi, have exposed a new class of vulnerabilities in Intel processors that let attackers exploit the CPUs' speculative execution to access information without authorization. This discovery affects millions of devices globally, compromising the data security of everything from personal computers to cloud servers over the last 6 years. The team exploited speculative execution technologies in CPUs, meant to boost processor speed, to reveal vulnerabilities by analyzing Branch Predictor Race Conditions (BPRC). They bypassed security measures, accessing a processor's entire memory. This finding highlights significant speculative CPU technology flaws in modern processors but also prompts a reevaluation of their security designs to better protect data against emerging threats. 👉 Learn more >> https://lnkd.in/eC2k_2BT 🇨🇭 Follow #ScienceSwitzerland for the latest news and emerging trends on Swiss science, technology, education, and innovation >> swissinnovation.org Follow us >> Science-Switzerland #Science | #Education | #Research | #Innovation

39

1 Kommentar

20 years ago, a group of Rhaeto-Romance-speaking[1] students gathered at the first Google Zurich office with a unique goal: translating the Google Search user interface into Romansh, Switzerland's fourth official language. Amid debates on translating terms like "Internet" or "computer"[2], the team diligently worked on the translation tool, resulting in the successful display of the interface in Rhaeto-Romance. Today, Google Search remains accessible in Rhaeto-Romance[3], a testament to the team's efforts and Google's commitment to making information available. Additionally, Microsoft later announced the availability of Office in Romansh, marking further progress for the language in the digital realm. cc Thomas Candrian Gion Hosang [1] https://lnkd.in/dyXHJu5W [2] We decided to follow other latin-based languages like French and translate "computer" into "ordinatur", but keeping "Internet" for the Romansh translation. [3] https://lnkd.in/ddCfSCZK

70

2 Kommentare

€266 billion – That’s how much damage cyberattacks caused in Germany in 2024 alone. And this number is still rising. The surprising part? In many cases, the real problem isn’t sophisticated hackers – it’s basic security gaps inside companies’ IT systems. Our new Security Guide takes a closer look at the three most common weak spots that lead to serious incidents. With real-world examples and clear recommendations, it shows how organizations can strengthen their cyber resilience step by step. 👉 Get the guide here: https://lnkd.in/dbc-GW5t

13