Major Vulnerabilities discovered and patched in Realtek RTL8195A Wi-Fi Module

With 99% of all software containing 3rd party code libraries, the cybersecurity risks derived from software supply chains are becoming prevalent. In this intro to supply chain security, we review the risks and the remedies for this burning danger.

We look back at and review some of the major vulnerabilities and attacks targeting embedded devices in 2020, hoping to avoid similar security issues in 2021.

Yesterday, JSOF published a set of vulnerabilities called "DNSpooq" which affects the immensely popular "dnsmasq" DNS caching server. These vulnerabilities can allow both LAN and WAN based attackers to inject malicious DNS entries and even to entirely take over the dnsmasq host via a remote heap overflow attack.