LogoFAIL: Widespread Vulnerability Exposes Devices to Malware Injection

This week in security, major firmware vendors were found to have vulnerabilities in their image parsers, allowing for potential exploitation. Additionally, researchers discovered a predictable pattern in a DNS resolver's source ports, which could be exploited to redirect traffic. DNS was also at the heart of another vulnerability involving DNS rebinding. In the 23andMe breach, lateral movement was observed, with information from millions of accounts accessed through the DNA Relatives and Family Tree features. The Sonos Era 100 device was successfully targeted at a hacking competition, highlighting the importance of hardening embedded devices. Lastly, there are still thousands of End-of-Life'd Exchange servers on the internet, posing a security risk.