P2P – Computer Security Articles

P2P Weakness Exposes Millions of IoT Devices

April 26, 2019 admin HiChip, iLnkP2P, Latest Warnings, P2P, Paul Marrapese, Shenzhen Yunni Technology, The Coming Storm, UDP hole punching, UPnP

Credit to Author: BrianKrebs| Date: Fri, 26 Apr 2019 13:17:14 +0000

A peer-to-peer (P2P) communications technology built into millions of security cameras and other consumer electronics includes several critical security flaws that expose the devices to eavesdropping, credential theft and remote compromise, new research has found.

Independent Krebs

Naming & Shaming Web Polluters: Xiongmai

October 9, 2018 admin 9Trading, A Little Sunshine, A-ZONE, Abowone, AHWVSE, ANRAN, ASECAM, Autoeye, AZISHN, BESDER, BESDERSEC, BESSKY, Bestmo, BFMore, BOAVISION, BULWARK, CANAVIS, Cisco Systems, CWH, DAGRO, Dahua, datocctv, DEFEWAY, digoo, DiySecurityCameraWorld, DONPHIA, ENKLOV, ESAMACT, ESCAM, EVTEVISION, Fayele, FLOUREON, Funi, GADINAN, GARUNK, HAMROL, HAMROLTE, Hangzhou Xiongmai Technology Co., Hauwei, Highfly, Hiseeu, HISVISION, HMQC, IHOMEGUARD, Internet of Things, IoT, ISSEUSEE, iTooner, JENNOV, Jooan, Jshida, JUESENWDM, JUFENG, JZTEK, KERUI, KKMOON, Koenig & Bauer AG, KONLEN, Kopda, Lenyes, LESHP, LEVCOECAM, LINGSEE, LOOSAFE, MA, Metrohm AG, MIEBUL, Mirai, MISECU, Ne'er-Do-Well News, Nextrend, OEM, OLOEY, OUERTECH, P2P, QNTSQ, SACAM, SANNCE, SANSCO, SEC Consult, SecTec, Shell film, sifsecurityvision, Sifvision, smar, SMTSEC, SSICON, SUNBA, Sunivision, Susikum, TECBOX, Techage, Techege, The Coming Storm, TianAnXun, Time to Patch, TMEZON, TVPSii, Unique Vision, unitoptek, USAFEQLO, VOLDRELI, Westmile, Westshine, Wistino, Witrue, WNK Security Technology, WOFEA, WOSHIJIA, WUSONLUSAN, XIAO, XinAnX, Xiongmai, xloongx, XMEye, YiiSPO, YUCHENG, YUNSYE, zclever, zilnk, ZJUXIN, zmodo, ZRHUNTER

Credit to Author: BrianKrebs| Date: Wed, 10 Oct 2018 00:41:56 +0000

What do we do with a company that regularly pumps metric tons of virtual toxic sludge onto the Internet and yet refuses to clean up their act? If ever there were a technology giant that deserved to be named and shamed for polluting the Web, it is Xiongmai — a Chinese maker of electronic parts that power a huge percentage of cheap digital video recorders (DVRs) and Internet-connected security cameras.

Independent Krebs

Dahua, Hikvision IoT Devices Under Siege

March 10, 2017 admin Amit Serper, bashis, Cybereason, Dahua backdoor, DH-IPC-HDBW13A0SN, DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDW13A0SN, DH-IPC-HDW23A0RN-ZS, DH-IPC-HFW13A0SN-W, Hikvision, Other, P2P, UPnP

Credit to Author: BrianKrebs| Date: Fri, 10 Mar 2017 20:07:51 +0000

Dahua, the world’s second-largest maker of “Internet of Things” devices like security cameras and digital video recorders (DVRs), has shipped a software update that closes a gaping security hole in a broad swath of its products. The vulnerability allows anyone to bypass the login process for these devices and gain remote, direct control over vulnerable systems. Adding urgency to the situation, there is now code available online that allows anyone to exploit this bug and commandeer a large number of IoT devices.