A couple of weeks ago we discovered that it’s possible for viruses to quickly spread among unsecured or WEP-encrypted Wi-Fi routers in densely populated urban areas. The solution seemed to be simple: ...

A malicious campaign known as 'Eternal Silence' is abusing Universal Plug and Play (UPnP) turns your router into a proxy server used to launch malicious attacks while hiding the location of the threat ...

A couple weeks ago we talked about in-app browsers, and the potential privacy issues when opening content in them. This week Microsoft reveals the other side of that security coin — JavaScript on a ...

Taiwanese hardware vendor QNAP urged customers on Monday to disable Universal Plug and Play (UPnP) port forwarding on their routers to prevent exposing their network-attached storage (NAS) devices to ...

Zyxel has patched a critical-severity OS command execution vulnerability that is remotely exploitable via crafted UPnP requests.

I have a UPnP router and wish to get the OS to see it. I'm sure it did once, but no longer.<BR><BR>UPnP is enabled on the router. Both UPnP elements under Network Services are installed. UPnP is ...

I wrote a story today about how attackers could take advantage of the way flash and Universal Plug and Play work to launch a man-in-the-middle attack against the majority of home routers, which are ...

Zyxel fixes a handful of worrying router flaws ...

The Department of Homeland security, in conjunction with Rapid7, has issued another warning (Vulnerability Note VU#922681) that everyone using the Internet needs to be aware of. The last warning that ...