Much love to #MidBitTech for supporting #BSidesAugusta. Your generosity drives learning and innovation in the #CyberSecurity world!
#Networking #IoTSecurity #DigitalForensics #Tech

New Threat Alert: Rustobot Botnet
A new Rust-based botnet is making waves — and it's hijacking routers to do it. @FortiGuardLabs latest research dives into Rustobot, a stealthy, modular botnet that’s fast, evasive, and ready to wreak havoc.

Learn how it works, what makes it different, and how to protect your network:
https://www.fortinet.com/blog/threat-research/new-rust-botnet-rustobot-is-routed-via-routers

IOCs

URLs

hxxp://66[.]63[.]187[.]69/w.sh
hxxp://66[.]63[.]187[.]69/wget.sh
hxxp://66[.]63[.]187[.]69/t
hxxp://66[.]63[.]187[.]69/tftp.sh
hxxp://66[.]63[.]187[.]69/arm5
hxxp://66[.]63[.]187[.]69/arm6
hxxp://66[.]63[.]187[.]69/arm7
hxxp://66[.]63[.]187[.]69/mips
hxxp://66[.]63[.]187[.]69/mpsl
hxxp://66[.]63[.]187[.]69/x86

Hosts

dvrhelper[.]anondns[.]net
techsupport[.]anondns[.]net
rustbot[.]anondns[.]net
miraisucks[.]anondns[.]net
5[.]255[.]125[.]150

Edit: Shout-out to the author behind this research, @7olzu

Just submitted a talk to DEF CON 33:
What SBOMs Forgot About the Network

NetBOM is a community-driven framework to declare where a device or app should connect so your network can block the rest.

Enforceable trust at the network layer.
netbom.net
#NetBOM #Cybersecurity #IoTSecurity #DEFCON33

ASUS routers with AiCloud can let hackers in with zero authentication—an urgent reminder to update your firmware and lock down your network. Could your router be the next target?

https://thedefendopsdiaries.com/understanding-the-critical-authentication-bypass-flaw-in-asus-routers/

#asusrouters
#authenticationbypass
#networksecurity
#iotsecurity
#cyberthreats

Shining a light on Silver sponsor @ManagedNerds! Your dedication to tech excellence enhances the #BSidesAugusta experience. Thank you!
#CloudSecurity #IoTSecurity #CyberSecEvent #InfoSec

Register now for OWASP Global AppSec EU 2025 and don't miss this essential session on embedded systems security!

https://owasp.glueup.com/event/123983/register/

While most security discussions focus on web, cloud, and corporate networks, what about the countless embedded systems around us—trains, traffic lights, and even the device you're using right now?

Thursday, May 29, 2025
10:30 AM - 11:15 AM CEST
Room 116+117

The infamous Mirai botnet is back and it's smarter—exploiting vulnerabilities in smart devices and DVRs to launch massive attacks. How secure are our everyday gadgets?

https://thedefendopsdiaries.com/the-resurgence-of-the-mirai-botnet-a-global-cybersecurity-threat/

#mirai
#iotsecurity
#cyberthreats
#ddos
#botnet

Has anyone seen the "Hacking Roomba" book I bought? I can't find it...
#cats #hackercat #catsofmastodon #roomba #iotsecurity #hacking

!exploitable Episode One - Breaking IoT

This article details the Doyensec team's analysis of a buffer overflow vulnerability in the Tenda AC15 router firmware (CVE-2024-2850)

https://blog.doyensec.com/2025/02/11/exploitable-iot.html

Critical ESP32 vulnerabilities enable remote code execution via Bluetooth; update advised. #ESP32 #IoTsecurity #Cybersecurity

More details: https://borncity.com/win/2025/03/16/tarlogic-security-detects-unknown-commands-in-esp32-chip-bluetooth-wifi/ - https://www.flagthis.com/news/11336

Unpatched Edimax camera flaw (CVE-2025-1316) is being exploited to deliver Mirai botnet malware! Attackers use default credentials to gain access & launch DDoS attacks. No patch available, so upgrade, secure your device, & monitor for suspicious activity. #botnet #cybersecurity #IoTsecurity #newz

https://thehackernews.com/2025/03/unpatched-edimax-camera-flaw-exploited.html

Pessima notizia per chi ama la #domotica:
Un ricercatore spagnolo ha trovato 29 comandi non documentati nel microchip #esp32 (della azienda cinese #espressif ), che potrebbero essere usati per infettare altri dispositivi della rete.
Fonte:
https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion-devices/

BREAKING: A chip used in millions of IoT devices has a backdoor! Who would've guessed? It's not like mass-market tech has ever had security issues before... Oh wait. But don't worry, a company that offers every security service imaginable (except maybe babysitting your cat) is on it!
https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-devices/ #IoTSecurity #Backdoor #TechNews #Cybersecurity #Vulnerability #ChipAlert #HackerNews #ngated

Backdoor detected in ESP32 Espressif IoT chip — https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-devices/
#HackerNews #Backdoor #Esp32 #Espressif #IoT #Cybersecurity #Vulnerability #IoTSecurity

Unveiling the ESP32 Backdoor: Implications for IoT Security

https://thedefendopsdiaries.com/unveiling-the-esp32-backdoor-implications-for-iot-security/

#esp32
#iotsecurity
#cybersecurity
#bluetoothvulnerability
#tarlogicsecurity

Understanding and Mitigating the Edimax IP Camera Vulnerability

https://thedefendopsdiaries.com/understanding-and-mitigating-the-edimax-ip-camera-vulnerability

#edimaxvulnerability
#ipcamera
#cybersecurity
#iotsecurity
#networkprotection

Akira Ransomware: Unsecured Webcams and IoT Vulnerabilities

https://thedefendopsdiaries.com/akira-ransomware-unsecured-webcams-and-iot-vulnerabilities

#akira
#ransomware
#iotsecurity
#webcamvulnerabilities
#cyberthreats

With the rise of IoT devices, secure access control is more important than ever. Discover how innovations like biometric authentication, blockchain, and AI are strengthening IoT security and protecting devices from cyber threats! #IoTSecurity #Cybersecurity

https://posivi.com/how-innovations-in-iot-access-control-strengthen-device-security/