#firmwaresecurity

CISA advisory ICSA-26-251-01 documents CVE-2026-85083 in CareCam Pro ANJIA AJL33PC0801: hard-coded bootloader credential allows privileged access with physical presence. It enables firmware modification and persistent compromise, undermining trust in affected deployments. #HardcodedCredentials #IotSecurity #FirmwareSecurity https://cyberworldops.eu/en/hard-coded-bootloader-credential-exposes-carecam-pro-camera-to-full

Just discovered a Secure Boot bypass tied to old Microsoft-signed shims. A stark reminder of how neglected revocation can endanger firmware-level security. A whopping 13 years of trust left unchecked! Time to revisit our security measures. #CyberSecurity #SecureBootBypass #Microsoft #FirmwareSecurity 🛡️💻 Secure Boot Bypass: 13 Years of Trust Left Unchecked https://www.squaredtech.co/secure-boot-bypass-13-years-of-trust-left-unchecked?fsp_sid=16411

Binarly found 6 U-Boot flaws including BRLY-2026-038 (CVSS 6.8) that allow pre-OS code execution on routers, servers, and IoT devices. #UBoot #Binarly #FirmwareSecurity #BootloaderVulnerability #IoTSecurity https://meterpreter.org/u-boot-vulnerabilities-binarly/?utm_source=mastodon&utm_medium=jetpack_social

RunZero disclosed 7 FatFs vulnerabilities affecting RTOS, drones, ATMs, and more. Attackers can exploit crafted SD cards or firmware images. #FatFs #EmbeddedSecurity #CVE #RTOS #FirmwareSecurity https://meterpreter.org/fatfs-vulnerabilities-embedded-devices/?utm_source=mastodon&utm_medium=jetpack_social