Key Takeaways
- Cov kws tshawb fawb tau tshawb pom qhov tsis zoo tseem ceeb hauv GPS tracker nrov siv hauv ntau lab lub tsheb.
- Cov kab no tseem tsis tau kho txij li cov chaw tsim khoom ua tsis tiav nrog cov kws tshawb fawb thiab txawm tias Cybersecurity thiab Infrastructure Security Agency (CISA).
- Qhov no tsuas yog qhov tshwm sim ntawm lub cev ntawm qhov teeb meem hauv qab ntawm tag nrho cov cuab yeej ntse ecosystem, qhia cov kws paub txog kev ruaj ntseg.
Cov kws tshawb nrhiav kev nyab xeeb tau pom qhov muaj qhov tsis zoo hauv qhov nrov GPS tracker uas tau siv ntau tshaj li ib lab lub tsheb thoob ntiaj teb.
Raws li cov kws tshawb fawb nrog tus neeg muag khoom ruaj ntseg BitSight, yog tias siv tau, rau qhov muaj qhov tsis zoo hauv MiCODUS MV720 lub tsheb GPS tracker tuaj yeem ua rau muaj kev hem thawj rau kev nkag mus thiab tswj cov haujlwm ntawm lub cuab yeej, suav nrog taug qab lub tsheb lossis txiav nws cov roj. muab. Thaum cov kws paub txog kev nyab xeeb tau hais txog kev txhawj xeeb txog kev nyab xeeb tsis txaus ntseeg hauv cov khoom siv ntse, siv internet siv tau tag nrho, kev tshawb fawb BitSight tshwj xeeb yog kev txhawj xeeb rau peb tus kheej thiab kev nyab xeeb.
"Hmoov tsis zoo, cov kev tsis zoo no tsis yooj yim rau kev siv," sau tseg Pedro Umbelino, tus kws tshawb fawb txog kev ruaj ntseg ntawm BitSight, hauv xov xwm tshaj tawm. "Qhov kev tsis txaus ntseeg hauv cov neeg muag khoom no tag nrho cov qauv tsim tsa cov lus nug tseem ceeb txog qhov tsis zoo ntawm lwm cov qauv."
Chaw taws teeb tswj
Hauv tsab ntawv ceeb toom, BitSight hais tias nws tau xoom rau ntawm MV720 txij li nws yog lub tuam txhab tus qauv kim tshaj plaws uas muaj kev tiv thaiv tub sab nyiag, roj txiav tawm, tswj chaw taws teeb, thiab muaj peev xwm geofencing. Lub xov tooj ntawm tes-enabled tracker siv SIM daim npav xa nws cov xwm txheej thiab qhov chaw hloov tshiab rau kev txhawb nqa servers thiab tsim los kom tau txais cov lus txib los ntawm nws cov tswv raug cai ntawm SMS.
BitSight thov tias nws nrhiav pom qhov tsis zoo yam tsis muaj kev siv zog ntau. Nws txawm tsim cov ntaub ntawv pov thawj ntawm lub tswv yim (PoCs) code rau tsib qhov kev tsis txaus siab txhawm rau ua kom pom tias qhov tsis zoo tuaj yeem siv rau hauv cov tsiaj qus los ntawm cov neeg ua phem phem.
Thiab nws tsis yog tib neeg uas tuaj yeem cuam tshuam. Cov trackers nrov nrog cov tuam txhab nrog rau tsoomfwv, tub rog, thiab tub ceev xwm cov koom haum. Qhov no coj cov kws tshawb fawb los qhia lawv cov kev tshawb fawb nrog CISA tom qab nws ua tsis tau zoo los ntawm Shenzhen, Tuam Tshoj cov chaw tsim khoom thiab cov khoom siv hluav taws xob thiab khoom siv tsheb.
Tom qab CISA tseem tsis tau txais cov lus teb los ntawm MiCODUS, lub koom haum tau coj nws los ntawm nws tus kheej los ntxiv cov kab laum rau Daim Ntawv Teev Npe Tsis Txaus Siab thiab Tshaj Tawm (CVE) thiab muab lawv cov qhab nia Common Vulnerability Scoring System (CVSS), nrog ob peb ntawm lawv tau txais qhov qhab nia hnyav ntawm 9.8 ntawm 10.
Kev siv cov kev tsis zoo no yuav tso cai rau ntau qhov xwm txheej tshwm sim, uas tuaj yeem muaj "kev puas tsuaj thiab cuam tshuam rau lub neej," ceeb toom cov kws tshawb fawb hauv tsab ntawv ceeb toom.
Nyob zoo thrills
Qhov siv tau yooj yim GPS tracker qhia txog ntau qhov kev pheej hmoo nrog rau tiam tam sim no ntawm Internet ntawm Yam (IoT) cov cuab yeej, ceeb toom cov kws tshawb fawb.
Roger Grimes, Grimes hais rau Lifewire hauv email. “Koj lub xov tooj ntawm tes tuaj yeem cuam tshuam los sau koj cov kev sib tham. Koj lub laptop lub webcam tuaj yeem qhib los kaw koj thiab koj cov rooj sib tham. Thiab koj lub tsheb GPS mus txog qhovtwg tuaj yeem siv los nrhiav cov neeg ua haujlwm tshwj xeeb thiab lov tes taw tsheb."
Cov kws tshawb fawb tau ceeb toom tias tam sim no, MiCODUS MV720 GPS tracker tseem muaj kev cuam tshuam rau cov lus hais tsis zoo vim tus neeg muag khoom tsis tau kho. Raws li qhov no, BitSight pom zoo kom ib tus neeg siv qhov GPS tracker lov tes taw kom txog thaum kho tau.
Tsim los ntawm qhov no, Grimes piav qhia patching nthuav qhia lwm qhov teeb meem, vim nws nyuaj tshwj xeeb rau nruab software kho ntawm IoT cov khoom siv. "Yog tias koj xav tias nws nyuaj rau kho cov software tsis tu ncua, nws yog kaum zaus nyuaj rau kho IoT cov cuab yeej," said Grimes.
Nyob hauv lub ntiaj teb zoo tagnrho, txhua yam khoom siv IoT yuav muaj qhov pib-patching txhawm rau txhawm rau nruab ib qho kev hloov kho tshiab. Tab sis hmoov tsis, Grimes taw qhia tias feem ntau cov khoom siv IoT xav kom tib neeg los hloov kho lawv tus kheej, dhia hla txhua yam ntawm hoops xws li siv kev sib txuas ntawm lub cev tsis yooj yim.
"Kuv xav xav tias 90% ntawm cov khoom siv GPS taug qab tsis zoo yuav nyob twj ywm thiab siv tau yog tias thiab thaum twg tus neeg muag khoom txiav txim siab kho lawv," Grimes hais. "IoT cov cuab yeej muaj qhov tsis zoo, thiab qhov no yuav tsis hloov mus rau yav tom ntej txawm hais tias muaj pes tsawg zaj dab neeg no tawm los."
