Skip to main content

Printers Soft Security Underbelly

It’s long been established that printers attached to networks often are poorly defended and a weak link that security criminals exploit routinely. After all, the hard drives embedded in these devices often contain images of sensitive documents ranging from passports to purchase orders. Despite the increased awareness of this issue, however, a new report from NCC Group, a provider of cybersecurity services, finds printers from six manufacturers that are known to be employed widely in the enterprise have dozens of vulnerabilities that can be exploited easily.

 

NCC evaluated printers from HP, Ricoh, Xerox, Lexmark, Kyocera and Brother. Its research found the printers were susceptible to everything from the ability to spy on every print job sent and send print jobs to unauthorized parties to denial-of-service attacks. The specific printers tested were the:

  • HP Color LaserJet Pro MFP M281fdw
  • Ricoh SP C250DN
  • Xerox Phaser 3320
  • Brother HL-L8360CDW
  • Lexmark CX310DN
  • Kyocera Ecosys M5526cdws

Mario Rivas, senior security consultant of NCC Group, said all the vulnerabilities discovered by NCC were shared with the printer manufacturers and have since been patched. System administrators are advised to update all vulnerable printers with either the latest firmware or forthcoming updates. However, most organizations tend to overlook the need to install updates to printers unless those updates are delivered as part of an ongoing managed service.

Printer manufacturers have been making a case for replacing printers with new models that are more secure for several years, with mixed success. Most organizations may not replace printers more than twice a decade.

Rivas said the first line of defense when it comes to printer security is to reduce the size of the attack surface. Printers often are loaded with software modules that nobody uses. Removing those modules makes it less likely a vulnerability can be exploited, he said.

At the same time, organizations need to ensure a robust set of access controls are in place to make sure no one is remotely accessing in an unauthorized manner, Rivas said. Ideally, printers should be on their own segregated networks, he added.

In most organizations, cybersecurity teams are so busy trying to defend the rest of the IT environment that finding the time to secure a printer can be challenging. The good news is as more organizations start to address cybersecurity issues stemming from internet of things (IoT) deployments, it becomes apparent quickly that one of the most prevalent things connected to the internet is a printer. Many of the tools and processes for securing IoT devices also can be applied to printers, Rivas said.

It’s worth noting almost every sensitive document an organization has eventually winds up on the hard drive of a printer. No one appreciates that simple fact more than cybercriminals, who have ready access to the tools needed to scan for networked printers. In fact, most cybersecurity criminals would much rather hack a printer than go to the trouble and expense of building a complicated piece of malware.

John Jackson is a Engineer turned writer who covers technological innovations and science. In addition to writing for her printer support blog and IT support services blogs, she has written tips and tricks, whitepapers, essays, and guides. Her favorite topics are Brother printer support, Lexmark printer support, Epson printer support, Samsung printer support etc.

Comments

Popular posts from this blog

What Is Digital Marketing?

 What Is Digital Marketing? Digital marketing is that the use of the social media, Internet, search engines, mobile devices, and other channels to succeed in consumers. Some consider digital marketing to be entirely new which needs a replacement way of understanding that how customers behave and new ways of approaching the purchasers compared to the normal marketing. Digital Marketing Channels 1. Website Marketing 2. Pay-Per-Click (PPC) Advertising 3.Content Marketing 4.Email Marketing 5.Social Media Marketing 6.Affiliate Marketing 7.Video Marketing 8.SMS Messaging Digital Marketing As A course and Career The Digital Marketing course will transform you into a complete digital marketer with expertise in the top eight digital marketing domains — search engine optimization, social media, pay-per-click, conversion optimization, digital analytics, content, mobile, and email marketing. Fast-track your career in digital marketing today with practical training you can appl
   5 Tips for Guiding Your Child Through an Escape Room   The most distinguishable characteristics of children are how immensely full of energy and curiosity they are! Compared to adults, they are far more willing to start thinking out of the box and be creative. These factors seemingly make them one of the best players to enjoy an escape room experience.    Taking your child to one of the escape rooms in Prescott this weekend can be a memorable experience for them. Visiting the escapades also undeniably offers you one of the best ways to spend quality time with your family. Furthermore, it also allows your child to test their creativity and problem-solving skills and even enhance their motor skills.    Now, while you take your kid to an escape room game anytime soon, here are 5 essential tips that you need to keep in your mind: 1.    Do your homework! It is always better to prepare yourself before entering the escape room game. So, instead of randomly choosing and

Why Science Labs are Important for Students in School?

Science is a subject which allows students to explore and discover new theories. From a small atom to large universe everything is conceptualize with help of science education. But only theoretical knowledge is not sufficient. Practical knowledge is important to increase engagement and knowledge. Science lab is a place for student which functions to magnify deep understanding of theoretical concepts taught in classrooms. By this effective teaching method, students can gain numerous benefits. Ideal Education Point (New Choudhary public school) believes that ‘Child learn in class but understand in laboratories. Laboratories provide a great experience and high degree of knowledge in developing necessary skills for study and research. Science is a little difficult subject than any other therefore it is must for any school to have a science lab. Know the importance of science labs - • Understand difficult aspects One cannot just read the hefty science books and understand all the meaning