New Exploit “Faxploit” affects HP OfficeJet All-in-One Printers

Security researchers have recently demonstrated at the security conference DEF CON 2018 a vulnerability that can be exploited via HP OfficeJet All-in-One Printers.  It is being dubbed “Faxploit” by the researchers, Eyal Itkin and Yaniv Balmas.  The attack takes advantage of security flaws in the implementation of the fax protocol used by OfficeJet printers, making many businesses susceptible to the attacks.

The researchers have stated that for this particular exploit, all the attackers need is a fax number to exploit the vulnerability, which they can then hijack the network and all systems connected to it.  They then can infect the network with their malware or even worse, outright steal your business’ important data.  Researchers have said that the impact of this exploit is not a small one as it is surveyed that businesses have actually increased their fax usage by almost 82% in 2017, so even with many new technologies, fax is still one of the most used ways to move documents.

Faxploit is yet another example where unsecured devices that businesses use on a daily basis can result into vulnerabilities in their network that many cyber criminals can use to steal data or hold them ransom.  Especially now that the Internet-of-things (IoT) ready devices are getting more and more mainstream, attackers are finding more ways to hit businesses where they are at least protected since this is more or less still in the beginning phases.   These threats can stay longer in the system due to the device’s inability to protect itself, making attacks stealthier and more destructive to the organizations network.

However, HP has released patches for the vulnerabilities (CVE-2018-5924 and CVE-2018-5925) and users are recommended to apply the firmware updates to make sure they will not be affected.

For those who are interested in a more proactive approach for these types of attacks, Trend Micro’s managed detection and response service allows customers to investigate security alerts without the need to hire qualified incident response staff. It provides alert monitoring, alert prioritization, investigation, and threat hunting services to Trend Micro customers. By applying artificial intelligence models to customer endpoint data, network data, and server information, the service can correlate and prioritize advanced threats. Trend Micro threat researchers can determine the extent and spread of the attack and work with the customer to provide a detailed remediation plan.

To learn more about “Faxploit” you may read Trend’s original article here, or you may contact us at 893-9515 and we will be happy to answer your inquiries!

What’s new with HP at Citrix Synergy 2017

HP and Citrix have always been key allies to one another, and with their collaboration offerings for the start of 2017, the synergistic benefits are shown more.  Be able to equip your employees with the right technology with HP’s anytime, anywhere workplace solutions.  Experience how we can make your employees experience easy access while still maintaining a level of security that you expect us to provide.  Below are just some of the synergies of HP and Citrix technology in which will be highlighted during the Citrix Synergy 2017.

HP Mobility’s industry-leading solutions

The world’s first built for business 3-in-1 device, the HP Elite x3 combines pc power and productivity with premium smartphone capabilities in a secure but elegant device.  Combined with the Citrix Receiver, you will be able to experience simple and seamless access between your apps and data without the need to change devices.  HP can help you transform and grow your company’s mobility and enterprise workflows with simple and secure access to data and apps from anywhere at anytime.

Cloud computing with HP Thin Clients

With HP Desktop and Mobile Thin Clients, be able to experience the innovative solutions which deliver simple cloud manageability, powerful security, and productivity-maximizing features while providing IT peace of mind.  Accelerate your business’ transition to the cloud with the new HP Thin Client Conversion Suite software.

Citrix Synergy will be held in Orlando, Florida at the Orange County Convention Center and will be on May 23 – 25, 2017.