Browsing tag

Lenovo

Lenovo Says It Shipped A Hackable Fingerprint Manager With Its Laptops

In case you’re running a Lenovo business machine with a built-in fingerprint sensor, you might want to install the latest security patch issued by the company. According to a security advisory published last week, the Lenovo Fingerprint Manager Pro software on many ThinkPad, ThinkCentre, and ThinStation systems contains a critical local privilege escalation vulnerability (CVE-2017-3762). The […]

Attackers Can Bypass Lenovo Fingerprint Manager through a Hard-coded Password

Lenovo released a security update for critical vulnerability with Lenovo Fingerprint Manager Pro that impacts dozens of ThinkPad, ThinkCentre and ThinkStation Workstations that are running Windows 7, 8 and the 8.1 operating systems. It is a utility for user authentication based on fingerprint recognition for Windows 8.1 (32-bit, 64-bit), 8 (32-bit, 64-bit), 7 (32-bit, 64-bit) […]

LENOVO FIXES HARDCODED PASSWORD FLAW IMPACTING THINKPAD FINGERPRINT SCANNERS

PC maker Lenovo issued a fix for a hardcoded password flaw impacting ThinkPad, ThinkCentre and ThinkStation laptops. The flaw affects nearly a dozen Lenovo laptop models that run versions of Microsoft Windows 7, 8 and the 8.1 operating system. The vulnerability was disclosed by Lenovo on Thursday who also offered a patch to fix affected systems. “Sensitive […]

Lenovo removes backdoor present in networking switches since 2004

Engineers at Chinese firm Lenovo have identified a backdoor in the networking switched namely Rackswitch and BladeCenter firmware. The company stated that the backdoor, referred to in the company’s security advisory (CVE-2017-3765) as “HP backdoor,” was discovered after carrying out an internal security audit of firmware for all the products featuring in its portfolio after […]

Lenovo to Pay $3.5m for Secretly Installing Adware in 750,000 Laptops

A few years back Lenovo Inc., a world famous and seemingly reliable laptop manufacturer firm headquartered in Beijing, found itself in hot waters due to the startling revelation that the company’s laptops had pre-installed adware called VisualDiscovery developed by Superfish. The software was responsible for compromising security protections installed by the users on their laptops. […]

Lenovo Gets a Slap on the Wrist for Superfish Adware Scandal

Lenovo has settled charges with the FTC and 32 state attorneys for shipping laptops preinstalled with the Superfish adware back in 2014 and 2015. According to a decision published on the FTC’s website, the Chinese hardware vendor has dodged crippling financial penalties. Instead, the FTC has “prohibited” Lenovo from “misrepresenting any features” in case it […]

Lenovo VIBE Mobile Phones Vulnerable to Local Root Privilege Escalation – Its Time to Update your Lenovo Smart Phones

A Critical Vulnerabilities Discovered in Lenovo Vibe Android Mobiles Phones which leads to Local Privilege Escalation to the Victims device that is not protected with a secure lock screen. It helps to Escalate the root Access  “Jail Breaking” and it leads to change the Device operations and devices Core Functionalities. This Critical vulnerability  Presented in […]

Beware; 36 Android Devices Shipped with Preinstalled Malware

Android devices have remained the center of attraction for malicious cyber criminals since forever. Not only do they churn out fake, infected apps one after another but also devise ways to exploit Android devices. The reason is quite evident; since Android devices are among the most commonly preferred mobile phone choices, therefore, cyber-criminals attack them […]

Privilege Escalation Vulnerability in Lenovo Transition Application

Summary Description: A vulnerability was identified in the Lenovo Transition program specific to some Lenovo Yoga, Flex and Miix systems running Windows where a user with local privileges could execute arbitrary code with administrative or system level privileges. Lenovo Transition is no longer supported, and Lenovo recommends that all users using Lenovo Transition update to […]

Lenovo scrambling to get a fix for BIOS vuln

Is it a bug or is it a backdoor? Lenovo, and possibly other PC vendors, is exposed to a UEFI bug that can be exploited to disable firmware write-protection. If the claims made by Dmytro Oleksiuk at Github are correct, an attacker can “disable flash write protection and infect platform firmware, disable Secure Boot, [and] bypass […]

Lenovo fixed two high severity flaws in Lenovo Solution Center

Lenovo fixed two flaws (CVE-2016-5249, CVE-2016-5248) in the Lenovo Solution Center, once again the company faces problems with pre-installed bloatware. Lenovo has fixed two high severity vulnerabilities, CVE-2016-5249, and CVE-2016-5248, in its Lenovo Solution Center that could be exploited by hackers to gain access to vulnerable machines and to kill any process running on them.  The […]

Dell, The Latest in The List of Pre-Rooted PC and Laptop Sellers

Dell is found to be shipping laptops having eDellRoot certificate installed by default. The certificate is through trusted but has all the permissions. Shipping laptops with pre-installed stuff is nothing new; Lenovo has been shipping laptops having pre-installed bloatware. Now, a user on twitter (Joe Nord) recently ordered a new Dell laptop and tweeted screenshot […]

Study Reveals Xiaomi, Huawei, Lenovo Phones Contain Malware By-default

A startling revelation made in GData study is that some of the Chinese smartphone units that are being shipped to Asia and European regions contain pre-installed malware. Manufacturer’s all over the world follow the rule of testing sample handsets of their upcoming smartphone and tablets comprehensively prior to their release in the market. This helps […]

26 Top Smartphone Models Come With Pre-installed Spyware

Short Bytes: According to a new and surprising report by the security firm G Data, 26 top Android smartphone models come with pre-installed spyware. These smartphone makers include reputed names like Lenovo, Xiaomi and Huawei. Buying a new Android smartphone doesn’t guarantee you a phone free of malicious spyware. On your phone, you see what […]

Lenovo accused of ‘massive security risk’ by researchers

The IOActive researchers reported that Lenovo devices software has serious security flaws and vulnerabilities that can be easily exploited by cyber criminals for installing malware. Globally active Chinese PC manufacturer Lenovo has been accused by researchers for running a “massive security risk” when experts identified exploitable flaws in its software. Reportedly, security Firm IOActive’s researchers […]

Lenovo Website Hacked amid SuperFish Malware scandal

The official website of world’s largest PC maker was hacked earlier Wednesday allegedly by Lizard Squad. Hackers left a deface page containing slideshow images of a teen along with “Breaking Free” from High School musical as page’s background. This is probably the worst time for Lenovo to have their site hacked amid SuperFish Malware scandal where the company […]

Windows Defender removes Superfish Malware from Lenovo PCs but not completely

The world renowned Lenovo Computer manufacturing company has been shipping laptops prepackaged with malware that makes you more vulnerable to hackers — all for the sake of serving you advertisements. To get rid of this malware Microsoft has released a signature update for Windows Defender to detect and remove Superfish malware installed on some Lenovo PCs. […]

How to Check if Your Lenovo is Infected with Superfish Adware and Remove it

Lenovo, the World’s largest PC maker, had pre-installed a virus-like software which makes the computer vulnerable to the hacking attacks. These laptops were recently shipped with a controversial software, known as Superfish, which was billed as a free “visual search” tool to find products online by scanning images and thus presenting similar products. This software […]

Lenovo IdeaPad Y580 [Review, Specification, Price & Performance]

The Lenovo IdeaPad Y580 is an excellent laptop that completely replaces your desktop PC. With its large screen, a full-sized keyboard and a built in Blu-ray drive- this is a ‘portable monster machine’! It even has some great multimedia and gaming capabilities, where it offers a genuine Windows 7 premium and high-end stuff in a […]