Date:06/02/20
Security researchers have discovered a vulnerability affecting connected home devices that allows hackers to take control of peoples' computers by attacking their smart devices.
The vulnerability affects any connected devices that use a network called the Zigbee protocol, including Philips Hue Smart Light Bulbs and Amazon Echo, according to a new report from security firm Check Point.
Check Point has shared its findings with Philips Hue, which has confirmed the vulnerability and listed it as "high" severity. The company has issued a patch, and is urging all users to install the latest software update to protect against potential hacks — the latest update is version 1935144040. Philips does not automatically update devices, even in cases of "high" severity, unless customers opt in to automatic updates. The company said it urges Philips Hue owners to enable automatic updates.
While Check Point demonstrated that Philips Hue devices are vulnerable, it's not clear whether the exploit can be replicated for all connected devices. Amazon, Apple, and Google recently reached an agreement that all their smart home devices would use the same protocol, known as the Zigbee protocol, to connect.
An Amazon spokesperson told Business Insider that the company is investigating whether its devices are vulnerable.
"Customer trust is important to us and we take the security of our devices seriously. We are reviewing this research to determine any impact on our devices," the Amazon spokesperson said.
The vulnerability allows hackers to access people's home computer networks using an over-the-air attack. Equipped with a laptop and antenna, attackers could take control of victims' computers by compromising the hub that connects their smart devices.
"Many of us are aware that IoT devices can pose a security risk, but this research shows how even the most mundane, seemingly 'dumb' devices such as lightbulbs can be exploited by hackers and used to take over networks, or plant malware," Check Point head of cyber research Yaniv Balmas said in a statement.
Philips Hue head of technology George Yianni said in a statement that the company is committed to protecting users' privacy and safety.
"We are thankful for responsible disclosure and collaboration from Checkpoint, it has allowed us to develop and deploy the necessary patches to avoid any consumers being put at risk," Yianni said.
A vulnerability lets hackers gain entry to peoples computers using Philips Hue smart bulbs
Security researchers have discovered a vulnerability affecting connected home devices that allows hackers to take control of peoples' computers by attacking their smart devices.The vulnerability affects any connected devices that use a network called the Zigbee protocol, including Philips Hue Smart Light Bulbs and Amazon Echo, according to a new report from security firm Check Point.
Check Point has shared its findings with Philips Hue, which has confirmed the vulnerability and listed it as "high" severity. The company has issued a patch, and is urging all users to install the latest software update to protect against potential hacks — the latest update is version 1935144040. Philips does not automatically update devices, even in cases of "high" severity, unless customers opt in to automatic updates. The company said it urges Philips Hue owners to enable automatic updates.
While Check Point demonstrated that Philips Hue devices are vulnerable, it's not clear whether the exploit can be replicated for all connected devices. Amazon, Apple, and Google recently reached an agreement that all their smart home devices would use the same protocol, known as the Zigbee protocol, to connect.
An Amazon spokesperson told Business Insider that the company is investigating whether its devices are vulnerable.
"Customer trust is important to us and we take the security of our devices seriously. We are reviewing this research to determine any impact on our devices," the Amazon spokesperson said.
The vulnerability allows hackers to access people's home computer networks using an over-the-air attack. Equipped with a laptop and antenna, attackers could take control of victims' computers by compromising the hub that connects their smart devices.
"Many of us are aware that IoT devices can pose a security risk, but this research shows how even the most mundane, seemingly 'dumb' devices such as lightbulbs can be exploited by hackers and used to take over networks, or plant malware," Check Point head of cyber research Yaniv Balmas said in a statement.
Philips Hue head of technology George Yianni said in a statement that the company is committed to protecting users' privacy and safety.
"We are thankful for responsible disclosure and collaboration from Checkpoint, it has allowed us to develop and deploy the necessary patches to avoid any consumers being put at risk," Yianni said.
Views: 430
©ictnews.az. All rights reserved.
Similar news
- Cellphone Use May Raise Cancer Risk
- Australian police pushes cyber safety education
- Vietnam aims to lead in e-government
- Senate Website Gets Hacked
- US builds net for cyber war games
- Japan enacts anti-computer virus law
- India passes law vs e-waste
- Anonymous Declares War On The City Of Orlando
- Microsoft highlights evolving dangers as online identity data proliferates
- Consumers want internet security to be provided by banks
- Government facilities targets of cyber attack
- South Korean web attacks might been war drill
- Sri Lanka to Establish National Passport Database to Increase Border Security
- Hi-tech crime agencies set to employ information security professionals
- Phone hacking and online campaign bring down the News of the World
