Cyber Risks · GreyNoise Blog

BLUUID: Firewallas, Diabetics, And… Bluetooth | Grey Noise Blog

Summary: GreyNoise Labs published a blog post by Remy on Bluetooth Low Energy device identification and vulnerability research, covering the construction of a BTLE GATT UUID database and remote identification of Bluetooth devices. The post describes vulnerabilities Remy found and responsibly disclosed in Firewalla firewall products, and cites recent incidents involving BTLE-enabled insulin pumps as evidence that compromise can cause physical harm.

What's compelling: The stakes named here are physical: BTLE-enabled insulin pumps have been involved in recent incidents where compromise or malfunction can hurt people, and the same identification techniques surfaced flaws in Firewalla firewall products.

Read the original at GreyNoise Blog ↗

Topics
Vulnerabilities & Patching
Related