THREAT UPDATE
After an incident at a third-party cloud provider may have exposed customer account information and credentials used to remotely manage networking hardware, Ubiquiti is urging customers to change their passwords and enable multi-factor authentication.
TECHNICAL DETAIL & ADDITIONAL INFORMATION
WHAT IS THE THREAT?
The statement released by Ubiquiti does not offer a detailed account of the breach or the scope of any customer data that may have been compromised.
WHY IS IT NOTEWORTHY?
Network hardware makes up the backbone of any organization. Some dealerships use Ubiquiti cameras, switches and wireless access points due to their low cost and lower entry point. These systems are an ideal target for any cyber criminal.
WHAT IS THE EXPOSURE OR RISK?
The warning from Ubiquiti is of significance because the company has made it fairly impossible for customers using the latest Ubiquiti updates and software to use their equipment without first connecting it through Ubiquiti’s cloud-based systems. If the cyber attackers gained access to these systems and the user credentials for the sites, it puts entire networks at risk of remote access at an administrative level.
WHAT ARE THE RECOMMENDATIONS?
At the time of writing this advisory, it is recommended to change your passwords and enable Multi-Factor Authentication (MFA/2FA).
To manage your security settings on Ubiquiti devices, visit https://account.ui.com and log in. Click on ‘Security’ from the left-hand menu.
- Change your password.
- Set a session timeout value.
- Enable Two-Factor Authentication.
REFERENCES:
For more in-depth information about the recommendations, please visit the following links:
If you have any questions, please contact us.
