Malware wipes data on Western Digital devices

The company stated that hackers used a vulnerability (CVE-2021-35941) to remotely wipe data from live disks.

2021-06-30

Western Digital My Book Live owners around the globe reported a total loss of data on their devices.

The company stated that hackers used a vulnerability (CVE-2021-35941) to remotely wipe data from live disks.

Censys, a security firm, and Ars Technica , on the other hand, believe hackers used an undocumented vulnerability in a system_factory_restore file. According to their investigations, Western Digital had commented out a part of the script that would have required a password before executing a factory reset.

A security expert told Ars Technica that the attackers would have to know the format of the script that triggered the reset to exploit the vulnerability. The hack puts Western Digital in a bad light, as if they they changed the script on purpose.

Some believe that the attackers originally used the CVE-2021-35941 vulnerability to turn the devices into botnets and a rival group used the system_factory_restore flaw to wipe the data from the disks.

Cybercriminals Use Advanced Installer to Spread Cryptomining Malware

Cybercriminals are using a legitimate Windows tool called Advanced Installer to spread cryptocurrency-mining malware.

9/9/2023

Microsoft PrintNightmare patch is not working

Microsoft has expanded patches for the so-called PrintNightmare vulnerability for Windows 10 version 1607, Windows Server 2012, and Windows Server 2016. The fix for the vulnerability can also bypasses the security protections in certain situations, experts say.

7/8/2021

Internet giants threaten to leave Hong Kong because of new laws

A letter sent by an industry group said companies are concerned that the planned rules could put their staff at risk of criminal investigations or prosecutions related to what the firms’ users post online.

7/7/2021

Worldcoin's Nairobi Warehouse Raided by Kenyan Police

Local reports say that Kenyan police raided a warehouse in Nairobi that was being used by Worldcoin, a startup that is developing a cryptocurrency that is based on eye scans. The raid came after concerns were raised about the privacy implications of Worldcoin's technology.

8/7/2023