August 19th, 2021: CyberHoot has received notification of critical risks to our national cybersecurity. A critical vulnerability has been made public by CISA, known as “BadAlloc”. Details of the vulnerabilities found in multiple real-time operating systems (RTOS) and supporting libraries are available here. CyberHoot is issuing this advisory to provide early notice of the reported vulnerabilities in the hope of assisting our clients in identifying at-risk systems and upgrading/eliminating/remediating the risks quickly and effectively. Doing so will reduce your risk of these attacks. The vulnerabilities may allow malicious actors to exploit your systems using remote code injection/execution or simply crash your device.
Below are the affected systems from this vulnerability. For more information on the specific vulnerabilities for each tool, go to https://cwe.mitre.org/data/definitions/190.html for more information.
Below are mitigations for this vulnerability on the various systems it affects. The majority of systems have updates/patches available for this potential exploit. CyberHoot recommends you update immediately if you use these tools.
Discover and share the latest cybersecurity trends, tips and best practices – alongside new threats to watch out for.
In a shift away from the usual “hack-meets-victim” narrative, a new kind of cyber-assault is emerging. One...
Read more
In cybersecurity, not all attacks happen through fancy malware or zero-day exploits. Some of the most effective...
Read more
The rapid rise of generative AI has unlocked enormous promise, but it’s also accelerating the arms race in...
Read moreGet sharper eyes on human risks, with the positive approach that beats traditional phish testing.
