Security News > 2024 > December > Update your OpenWrt router! Security issue made supply chain attack possible

A security issue that could have allowed attackers to serve malicious firmware images to users has been fixed by OpenWrt Project, the organization that helms the development of the popular Linux distribution for embedded devices. About OpenWrt OpenWrt is a customizable operating system that’s primarily used for wireless home routers by various manufacturers, instead of the OS/firmware provided by them. “Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem … More → The post Update your OpenWrt router! Security issue made supply chain attack possible appeared first on Help Net Security.
News URL
https://www.helpnetsecurity.com/2024/12/09/openwrt-security-update-supply-chain-attack/
Related news
- AI-Powered SaaS Security: Keeping Pace with an Expanding Attack Surface (source)
- Still Using an Older Version of iOS or iPadOS? Update Now to Patch These Critical Security Vulnerabilities (source)
- Recent GitHub supply chain attack traced to leaked SpotBugs token (source)
- SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack (source)
- That massive GitHub supply chain attack? It all started with a stolen SpotBugs token (source)
- New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner (source)
- ASUS Confirms Critical Flaw in AiCloud Routers; Users Urged to Update Firmware (source)
- Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack (source)
- Ripple NPM supply chain attack hunts for private keys (source)
- Linux 'io_uring' security blindspot allows stealthy rootkit attacks (source)