Blog

The security incidents that need action, explained with sources. Updated all day by HIFY Radar.

Videostrong Technology Set-top boxes Android… · Exploitation confirmed

Google Dismantles 1.3 Million TV Box Botnet; Factory Backdoor Remains

Google and partners dismantled the XCPE botnet of more than 1.3 million Android TV set-top boxes and took down its command servers. Google says Chinese manufacturer Videostrong shipped the x.cpe backdoor in factory firmware and sold access to criminals, who used the boxes as residential proxies and for ad fraud. The backdoor remains in firmware, reinstalls after restart and cannot be removed by owners; affected devices, seen in 182 models, should be replaced.

· 3 min read

Latest

See archive →
  1. Debian APT · Disclosed

    Debian patches APT flaw letting network attacker run code as root

    · 1 min read
  2. Node.js · Disclosed

    Node.js warns of high-severity flaws; fixes due November 11

    · 1 min read
  3. Ruby on Rails · Disclosed

    Rails Patches Critical Flaw Enabling Arbitrary Server File Writes

    · 1 min read
  4. Xen Project Xen · Disclosed

    Xen Patches Cross-VM Memory Flaws; Versions 4.6 to 4.16 Unpatched

    · 1 min read

Vulnerabilities and patches

143 articles in the last 30 days

See all →
  1. Tencent Sogou Input Method · Exploitation reported

    Tencent Patches Sogou After DNS Hijack Delivered DarkVigil Backdoor

    · 2 min read
  2. Google Chrome · Exploitation reported

    Google Rolls Out Chrome 157 With 213 Fixes, Seven Critical

    · 1 min read
  3. SolarWinds Dameware · Disclosed

    SolarWinds patches critical command injection flaw in Dameware

    · 1 min read

Data breaches

316 articles in the last 30 days

See all →
  1. Imagene Labs · Breach

    Threat actor claims full access and genetic data of Singapore genomics firms

    · 1 min read
  2. HCA Healthcare · Breach

    HCA Healthcare confirms breach with patient and employee data

    · 1 min read
  3. University Hospitals · Breach

    University Hospitals systems remain offline after cyberattack, no timeline

    · 1 min read

Supply chain

20 articles in the last 30 days

See all →
  1. iCollections 9.7.2 para macOS · Exploitation confirmed

    Fake iCollections site for macOS offers DMG flagged as malware

    · 1 min read
  2. Nikke · Exploitation confirmed

    Shift Up confirms NIKKE PC launcher tampering and deploys fix

    · 2 min read
  3. Trezor Safe 5 vendida pela revenda CryptoBilis · Exploitation reported

    Suspected Implant in Trezor Safe 5 Sold by Authorized Reseller CryptoBilis

    · 1 min read

Latest issues

The daily newsletter, with what to fix first.

All issues →
  1. #14 · Nov 04CISA sets November 6 deadline to patch attacked WordPress
  2. #13 · Nov 03Botnet of 1.3 million TVs taken down; Mercado Bitcoin confirms attack
  3. #12 · Nov 02Ivanti corrige zero-days; FBI liga roubo na Binance à Coreia
  4. #11 · Oct 3163 thousand attacks on WordPress; Microsoft reissues .NET patch

Get what matters every day at 6am

A short issue with the incidents that need action, ranked by what to fix first. Free, no spam.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Full archive

Everything the Radar published in the last 30 days, newest first. Search by company, product or CVE.