Amazon patches Echo, Kindle devices at risk of cyber attacks

From straitstimes.com

Users of Amazon’s Echo speakers and Kindle e-readers worldwide have been put at risk by vulnerabilities that cyber attackers can exploit to intercept the devices’ online signals as a first step towards using them as surveillance tools, says Slovakian cyber security firm ESET.

The first generation of Echo speakers, an Internet of Things (IoT) device which records users’ voices to run tasks, and the eighth generation of the Kindle e-reader have been found to be vulnerable.

Amazon has since released firmware updates to patch these vulnerabilities.

At a press event in Slovakia on Tuesday, ESET said these devices were discovered to be vulnerable to Key Reinstallation Attacks (Krack) in October last year.

Read more…