Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Endpoint

5/22/2018
11:45 AM
50%
50%

Pet Tracker Flaws Expose Pets and Their Owners to Cybercrime

Hackers can exploit vulnerabilities in popular pet trackers to intercept location coordinates and access owners' personal data.

In a future where everything is connected, cybercriminals may not need to target you to steal your personal data. They can hack your pets instead. 

Kaspersky Lab researchers today published the results of a study investigating vulnerabilities in popular pet trackers, which transfer GPS coordinates from pets to owners for safety and location monitoring. The flaws they discovered could let an attacker hack these devices, identify and replace the coordinates of a pet and its owner, and access owners' data.

In studying several brands of pet trackers, researchers found: Bluetooth capabilities that don't require authentication, authorization tokens and coordinates that can be stored sans encryption, trackers that don’t check server certificates for HTTPS connections, and trackers and apps that allow the installation of false firmware and transmit the name, email, and coordinates of the pet's owner.

It's another reason to worry about the implications of poor IoT security. If a hacker can intercept these coordinates, they can identify where a pet or owner is at any given time, learn their daily routines, and over time develop a pattern of owners' and animals' habits.

Read more details here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
BrianN060
50%
50%
BrianN060,
User Rank: Ninja
5/22/2018 | 1:11:44 PM
If you use the internet to track something, so can anyone else - no news here
Your kids, your pets, your workouts... whatever; with breaches in even high security environments commonplace, why do people feel they have a justifiable expectation of security with their consumer devices and services?  I think we all know the answers: marketing which downplays or totally ignores security concerns (or overstates included security features), for IoT devices and services; to be followed by marketing of devices and services to secure your IoT. 
Why AI Will Create Far More Jobs Than It Replaces
John DiLullo, CEO, Lastline,  5/14/2019
97% of Americans Can't Ace a Basic Security Test
Steve Zurier, Contributing Writer,  5/20/2019
Baltimore Ransomware Attack Takes Strange Twist
Kelly Jackson Higgins, Executive Editor at Dark Reading,  5/14/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-12216
PUBLISHED: 2019-05-20
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVE-2019-12217
PUBLISHED: 2019-05-20
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL stdio_read function in file/SDL_rwops.c.
CVE-2019-12218
PUBLISHED: 2019-05-20
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVE-2019-12219
PUBLISHED: 2019-05-20
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_error.c.
CVE-2019-12220
PUBLISHED: 2019-05-20
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c.