As the COVID-19 pandemic passes more somber fatality milestones and our global society strive to return to some kind of normality, other issues like cybersecurity persist and increase. Last week, JSOF Research Lab uncovered a series of 19 zero-day vulnerabilities that could impact hundreds of millions of IoT devices. Collectively named “Ripple20,” the vulnerabilities were found in a TCP/IP stack that is widely embedded in enterprise and consumer-grade products including transportation systems and power grids, as well as industrial and commercial buildings. “The interesting thing about Ripple20 is the incredible extent of its impact, magnified by the supply chain factor. The wide-spread dissemination of the software library (and its internal vulnerabilities) was a natural consequence of the supply chain “ripple-effect”. A single vulnerable component, though it may be relatively small in and of itself, can ripple outward to impact a wide range of industries, applications, companies, and people,” said the JSOF report on the discovery. […]