According to one of the most recent reports in the field of cybersecurity, despite years of warnings from experts – and examples of rare in-the-wild attacks, such as the NSA’s hard drive implant – devices continue to accept unsigned firmware. The team highlighted the TouchPad and TrackPoint components in Lenovo laptops, HP Wide Vision FHD computer cameras, and the Wi-Fi adapter in Dell XPS notebooks. And, while the vulnerable devices themselves may not be particularly valuable to a hacker, they can serve as a foothold for getting into other systems on the network.
Perhaps most frustrating is that these sort of shortcomings have been known of for years, and have yet to be cleaned up. The Eclypsium team contacted Qualcomm and Microsoft regarding the Dell adapter – Qualcomm makes the chipset, Microsoft’s operating system provides signature checks – and encountered a certain amount of buck-passing.
One of the primary challenges for many small and medium businesses is that they do not have the necessary resources to proactively monitor and manage these risks. That’s why here at CySeSo we offer them the opportunity to register for our security alerts program, that can help them learn what vulnerabilities may impact their business systems, without having to scramble all over the internet looking for that information.
If you want to learn more about our company services, or for a FREE confidential no-obligation consultation about your company’s cybersecurity needs, please contact us at your earliest convenience.
For more information about this cybersecurity notice, or to rea the original article please visit The Register