Best Source Solutions

On Wednesday, security researchers at Akamai Technologies warned that the Mirai Corona botnet is exploiting a previously unknown flaw to mass infect internet-connected cameras.

The zero-day vulnerability affects the AVM1203 camera from Taiwanese vendor Avtech Security. Akamai researchers discovered that the brightness function in the camera can be abused to remotely inject and execute commands into the camera's software with elevated privileges.

Despite the fact that the cameras are quite old, the CISA stated in their advisory that these devices are still used worldwide, including by transportation authorities and other critical infrastructure entities.

The flaw opened the door for the Mirai Corona botnet—a malicious army of infected routers—to spread and take over AVM1203 cameras connected to the internet. According to Akamai’s report, the botnet has been leveraging the vulnerability since at least December 2023.

Interestingly, a proof-of-concept exploiting the flaw in the camera has been around since 2019, but it never received a vulnerability designation until this month. Avtech Security did not immediately respond to a request for comment.

🔗: https://www.pcmag.com/news/botnet-takes-over-security-cameras-using-a-flaw-that-wont-be-patched

Too funny not to share

🌹🦝🌹

T-Mobile phones will connect to Starlink for free starting next year T-Mobile and SpaceX have announced that Starlink satellites launched next year will be able to connect directly to the carrier’s phones over existing cellular bands. The companies hope to enable global roaming wherever satellite coverage exists, and the service may potentially be added for fr…

'What a Shame': A Generation Mourns as Apple Announces It Will Discontinue Beloved Device The tech giant announced that it will be discontinuing production of the music-playing product on Wednesday.

Apple sues company known for hacking iPhones on behalf of governments Apple has sued NSO Group, an Israeli firm that sells software to government agencies and law enforcement that allows them to hack iPhones and read the data on them, including communications.

Microsoft will now snitch on you at work like never before | ZDNet You think there are limits to what your employer can see you do online? Some new Microsoft updates may make you think a little more about that.

Apple's iPhone privacy upgrade cost Facebook, YouTube, Twitter, and Snap nearly $10 billion in ad revenue, report says Apple introduced a privacy change for iPhones in April that forces apps to ask users' permission before tracking them for advertising purposes.

The Facebook Papers: dozens of stories based on leaked whistleblower documents just dropped The reports, based on Facebook documents leaked by whistleblower Frances Haugen, ramp up the pressure on Facebook CEO Mark Zuckerberg.

Solar ‘superstorm’ could prompt ‘internet apocalypse,’ global outages Some researchers are sounding the alarm on a solar “superstorm” that could prompt global electricity and internet outages “lasting several months.”