{"id":36226,"date":"2020-07-23T10:14:10","date_gmt":"2020-07-23T10:14:10","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/"},"modified":"2020-07-23T10:14:10","modified_gmt":"2020-07-23T10:14:10","slug":"ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/","title":{"rendered":"Ubiquiti, go write on the board 100 times, ‘I must validate input data before using it’… Update silently breaks IDS\/IPS"},"content":{"rendered":"

Ubiquiti got a lesson in never blindly trusting external input this month.<\/p>\n

Its intrusion detection and prevention system (IDS\/IPS) feature on its gateway hardware fetched a set of rules from an outside source that were broken, and rather than ignore the invalid data and fall back to known-valid data, it simply silently stopped working.<\/p>\n

Thus users were none the wiser the network security mechanism had failed, and was no longer doing its job of alerting folks to malicious activity, in the case of IDS, or blocking it, in the case of IPS.<\/p>\n

The IDS\/IPS functionality is said<\/a> to be built on the open-source Suricata tool, and is branded by Ubiquiti as its Threat Management.<\/p>\n

This is a beta service for the network gear maker’s UniFi Dream Machine (UDM) and Security Gateway (USG) products. Its job is to flag up, or block, any network activity that matches a set of rules that is refreshed each day. These rules define known malicious network traffic, such as common connections made by malware, so if any of these rules are triggered by packets on the network, it’s likely something bad is happening.<\/p>\n

Those rules are sourced from Proofpoint’s Emerging Threats intelligence service, which pools together a bunch of suspect network packet signatures into one place.<\/p>\n

Unfortunately, from Friday to last night, a collection of those rules \u2013 ranging from worm and trojan detection to rogue external netblocks \u2013 contained invalid data, which caused Ubiquiti’s device software to ignore those rules completely. And thus, any malicious traffic that would have matched the rules will have potentially sailed through silently.<\/p>\n

\"WiFi<\/p>\n

You spoke, we didn’t listen: Ubiquiti says UniFi routers will beam performance data back to mothership automatically<\/h2>\n

READ MORE<\/span><\/a><\/div>\n

Specifically, Ubiquiti’s back-end systems fetch the rules from Proofpoint, and then distribute the rules to UDM and UGS devices. What should have happened is that Ubiquiti should have validated the rules before passing them to customer equipment, and the firmware on the gadgets should not have thrown away its previous rules before installing, and failing on, the latest ones. If either step had been taken, Threat Management would have continued operating as expected albeit using out of date rules.<\/p>\n

Ubiquiti promised it would fix the issue within its back-end, and on Wednesday night, the rules were corrected. Devices should automatically download and install the working rule set.<\/p>\n

It’s all detailed here<\/a> in the Ubiquiti support forums.<\/p>\n

“The feature is failing until Ubiquiti Inc puts out a fix,” wrote user AlphaTango, who raised the alarm. “You are not currently protected from the rules … The rules coming from Proofpoint aren’t validated and are then distributed to all users. The lack of rule validation on the update scripts results in bad rules being loaded.<\/p>\n

“Right now it appears Proofpoint has inadvertently caused a widespread denial-of-service attack on the Ubiquiti IDS\/IPS protection. Rule number one of secure programming, never trust external input.”<\/p>\n

The Register<\/i> has yet to hear back on the matter from Ubiquiti, though a support forum rep called Marcus acknowledged the blunder, and said Threat Management was now back to normal.<\/p>\n

“This was caused by a change on Emerging Threats open signatures repository that, unfortunately, we have no control over it,” said Marcus. “Our firmware team is already working on a fix that should be available soon and will not require any firmware updates since it will be handled on our cloud side.”<\/p>\n

He then followed up: “The issue is resolved. The IPS\/IDS auto-update rules daily, so it should fix itself. However, if you want to make this faster, please feel free to disable\/enable IPS\/IDS via GUI [to reload the rules] or manually update rules via SSH.”<\/p>\n

We note that AlphaTango tried to report the issue via Ubiquiti’s bug-bounty program, but was denied a reward. The gateway maker’s rep said this was because Threat Management is still considered a beta service and out of scope. Marcus also said the device firmware’s has other protection mechanisms as well as the IPS\/IDS. \u00ae<\/p>\n

Thanks to the anonymous reader who pointed us to the Ubiquiti forums. Got a tip to share? You can contact us securely<\/a>.<\/i>\n<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Bad traffic rules from HQ caused intrusion detection and prevention on gateways to just stop working Ubiquiti got a lesson in never blindly trusting external input this month.\u2026 READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":36227,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-36226","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"\nUbiquiti, go write on the board 100 times, 'I must validate input data before using it'... Update silently breaks IDS\/IPS 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ubiquiti, go write on the board 100 times, 'I must validate input data before using it'... Update silently breaks IDS\/IPS 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-07-23T10:14:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Ubiquiti, go write on the board 100 times, ‘I must validate input data before using it’… Update silently breaks IDS\\\/IPS\",\"datePublished\":\"2020-07-23T10:14:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/\"},\"wordCount\":722,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/\",\"name\":\"Ubiquiti, go write on the board 100 times, 'I must validate input data before using it'... Update silently breaks IDS\\\/IPS 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg\",\"datePublished\":\"2020-07-23T10:14:10+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ubiquiti, go write on the board 100 times, ‘I must validate input data before using it’… Update silently breaks IDS\\\/IPS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ubiquiti, go write on the board 100 times, 'I must validate input data before using it'... Update silently breaks IDS\/IPS 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/","og_locale":"en_US","og_type":"article","og_title":"Ubiquiti, go write on the board 100 times, 'I must validate input data before using it'... Update silently breaks IDS\/IPS 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-07-23T10:14:10+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Ubiquiti, go write on the board 100 times, ‘I must validate input data before using it’… Update silently breaks IDS\/IPS","datePublished":"2020-07-23T10:14:10+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/"},"wordCount":722,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/","url":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/","name":"Ubiquiti, go write on the board 100 times, 'I must validate input data before using it'... Update silently breaks IDS\/IPS 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg","datePublished":"2020-07-23T10:14:10+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/ubiquiti-go-write-on-the-board-100-times-i-must-validate-input-data-before-using-it-update-silently-breaks-ids-ips\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Ubiquiti, go write on the board 100 times, ‘I must validate input data before using it’… Update silently breaks IDS\/IPS"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/36226","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=36226"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/36226\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/36227"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=36226"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=36226"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=36226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}