Flatt Security Research company blog

Compromising OpenWrt Supply Chain

by RyotaK flatt.tech published 2024-12-0611 min read

Introduction Hello, I’m RyotaK (@ryotkak ), a security engineer at Flatt Security Inc. A few days ago, I was upgrading my home lab network, and I decided to upgrade the OpenWrt on my router.1 After accessing the LuCI, which is the web interface of OpenWrt, I noticed that there is a section called Attended Sysupgrade…

Points

584

HN comments

99

Submissions

1

Cited by

0 commenters

Security & PrivacyInfrastructure & DevOps2024

Related posts from the same era

Reverse engineering Ticketmaster's rotating barcodes

conduition20242,305 points714 comments details

Bypassing airport security via SQL injection

Ian Carroll20242,004 points440 comments details

Anyone can access deleted and private repository data on GitHub

Truffle Security Blog20241,983 points374 commentscited by 8 details

Everyone knows your location: tracking myself down through in-app ads

Tim Shmykov20251,957 points600 commentscited by 4 details

Our investigation into the suspicious pressure on Archive.today

AdGuard DNS Blog20251,816 points443 comments details

In 2024, please switch to Firefox

Roy Tanck20231,776 points810 comments details