TECH

Nearly 500 million enterprise IoT devices are vulnerable due to security breach ... at 10 years
The cyber security specialist has published the results of a survey, in which it estimates that nearly 500 million corporate IoT devices are vulnerable to DNS re-join attacks.DNS rebinding takes advantage of a flaw that has existed for almost a decade in Web browsers and allows an attacker to bypass the network firewall and use the victim's browser to access other devices on the network.An attacker can gain access to the web browser through a malicious link contained in an email, banner or other source, which can lead to theft of personal data or a botnet attack similar to Mirai malware. According to Armis , about 165 million printers (66%) are susceptible to DNS reconnect attacks, pointing to Hewlett Packard, Epson, Konica, Lexmark and Xerox as examples of representative vendors that distribute vulnerable printers.Around 75% of IP cameras have weaknesses, which translates to 160 million, mainly from manufacturers such as Axis Communications, GoPro, Sony and Vivotek.The company also identified 124 million (77%) of IP phones as vulnerable, including Avaya, Cisco, Dell, NEC and Polycom, 28.1 million (57 percent) smart TVs and 14 million (87 percent) of switches, routers, and access points. Manufacturers include Cisco, Netgear, Extreme, Aruba and Avaya.As for smart columns, about 5.1 million (78%) of Apple's devices, Google, Roku and Sonos are vulnerable to the security flaw.sailed the top sites in 2016.



Sapo