Security News

Devices From Many Vendors Can Be Hacked Remotely Due to Flaws in Realtek SDK
2021-08-16 18:35

A large number of IoT systems could be exposed to remote hacker attacks due to serious vulnerabilities found in software development kits provided to device manufacturers by Taiwan-based semiconductor company Realtek. Firmware security company IoT Inspector said its researchers have identified more than a dozen vulnerabilities in SDKs provided by Realtek to companies that use its RTL8xxx chips.

Sectigo Secure Key Storage SDK secures and manages keys in IoT devices against sophisticated attacks
2021-08-11 02:00

Sectigo announced the addition of the Sectigo Secure Key Storage SDK to its collection of offerings. Sectigo Secure Key Storage: The software-based alternative for IoT devices.

LoginID SDK empowers developers to integrate FIDO strong authentication into their websites or apps
2021-07-01 01:00

LoginID announced additional SDK options for developers. These SDKs empower developers to integrate FIDO strong authentication into their websites or apps.

Vulnerabilities in Open Design Alliance SDK Impact Siemens, Other Vendors
2021-06-18 16:39

Eight vulnerabilities discovered in the Drawings software development kit made by Open Design Alliance impact products from Siemens and likely other vendors. Dgn design files, is affected by several vulnerabilities that can be exploited by convincing the targeted user to open a specially crafted file.

Security Camera Feeds Exposed Due to Flaw in SDK Used by Many Vendors
2021-06-16 12:49

A critical vulnerability discovered in a ThroughTek P2P software development kit used by multiple security camera manufacturers can be exploited to gain remote access to camera feeds. The company says its solutions are used by millions of connected devices.

Microsoft's Azure SDK site tricked into listing fake package
2021-03-17 08:01

A security researcher was able to add a counterfeit test package to the official list of Microsoft Azure SDK latest releases. The simple trick if abused by an attacker can give off the impression that their malicious package is part of the Azure SDK suite.

Researcher adds his fake package to Microsoft Azure SDK releases list
2021-03-17 08:01

A security researcher was able to add a counterfeit test package to the official list of Microsoft Azure SDK latest releases. The simple trick if abused by an attacker can give off the impression that their malicious package is part of the Azure SDK suite.

Researcher adds their package to Microsoft Azure SDK releases list
2021-03-17 08:01

A security researcher was able to add a counterfeit test package to the official list of Microsoft Azure SDK latest releases. The simple trick if abused by an attacker can give off the impression that their malicious package is part of the Azure SDK suite.

CyberLink integrates its facial recognition SDK FaceMe into Vypin eScreener kiosks
2021-03-01 00:30

CyberLink announced a partnership integrating its facial recognition software development kit FaceMe into Vypin eScreener kiosks. Vypin launched the Vypin eScreener kiosk with the latest in automated screening technology to promote health and safety without sacrificing the employee or customer experience.

SDK Bug Lets Attackers Spy on User’s Video Calls Across Dating, Healthcare Apps
2021-02-18 14:01

A vulnerability in an SDK that allows users to make video calls in apps like eHarmony, Plenty of Fish, MeetMe and Skout allows threat actors to spy on private calls without the user knowing. Healthcare apps such as Talkspace, Practo and Dr. First's Backline, among various others, also use the SDK for their call technology.