Zombies Gone, Problems Persist With Emergency Alert System

Researchers warn that Monroe Electronics' Emergency Alert System and DASDEC devices contain persistent and newly introduced security flaws—hard-coded/predictable credentials, shipped root SSH keys, and publicly accessible backups—that left hundreds of devices reachable from the Internet; these weaknesses previously enabled attackers to broadcast a false "zombie uprising" alert, and vendor patches have been incomplete, leaving a majority of devices potentially vulnerable.