{"id":21073,"date":"2022-06-08T09:54:23","date_gmt":"2022-06-08T13:54:23","guid":{"rendered":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/?p=21073"},"modified":"2022-06-08T16:39:18","modified_gmt":"2022-06-08T20:39:18","slug":"owl-labs-vulnerability-patch-cisa","status":"publish","type":"post","link":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/","title":{"rendered":"Hybrid meeting vendor OWL Labs urges updates to patch security issues"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">OWL Labs, which makes 360-degree video conferencing equipment for classrooms and boardrooms, is telling its customers to patch a number of vulnerabilities, including one that allows people to connect to meetings over Bluetooth without a passcode.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The company, which claims to have more than 2,000 education customers across K-12 and higher ed, announced software updates Friday and Monday targeting how its hardware connects to wireless networks and shares data, with more updates on the way. The U.S. Cybersecurity and Infrastructure Security Agency also issued an alert Tuesday instructing users to <a href=\"https:\/\/www.cisa.gov\/uscert\/ncas\/current-activity\/2022\/06\/07\/owl-labs-releases-security-updates-meeting-owl-pro-and-whiteboard\">update their OWL Labs devices.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The software updates were issued after independent researchers claimed to find vulnerabilities that could leave data and screenshots open to attackers, <a href=\"https:\/\/arstechnica.com\/information-technology\/2022\/06\/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users\/\">Ars Technica reported Thursday<\/a>. OWL Labs produces several pieces of hardware, including the Meeting OWL, a speaker fitted with cameras, microphones and an owl-like face, and a whiteboard camera for hybrid meetings.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The updates cut off some functions in order to secure network access through the internet-connected speakers. For example, the devices can no longer be used as a wireless access point. The company also paused its &#8220;Whiteboard Share and Save&#8221; function, which captured whiteboard notes, and deleted all data from March 2022. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;The likelihood that our customers have been affected by these issues is low, but we wanted to bring to your attention in the effort of full transparency,&#8221; read a <a href=\"https:\/\/resources.owllabs.com\/blog\/owl-labs-update\">blog post<\/a> from OWL Labs cofounder Mark Schnittman.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">After addressing these &#8220;high-security&#8221; issues, the company is now working on vulnerabilities related to when users need to use passcodes for the speaker. One vulnerability is that a user does not need to enter a passcode to connect to the Meeting OWL speaker through Bluetooth. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;The Owl PIN issues are low risk and would allow someone to access per-meeting default-meeting settings only &#8230; and require them to be within Bluetooth range,&#8221; Schnittman wrote, adding that the company also employed third-party <a href=\"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/tag\/security\/\">security<\/a> testing. &#8220;We expect to resolve the above issues in the next few weeks and will communicate when completed.&#8221; <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The passcode issue was one of the vulnerabilities that posed particular concern to Miami University in Oxford, Ohio, which <a href=\"https:\/\/www.miamioh.edu\/it-services\/news\/2022\/06\/meeting-owls-security.html\">posted a message Friday<\/a> asking users only to use OWL devices when necessary and to unplug them after meetings. The university&#8217;s IT team reposted the message on Twitter <a href=\"https:\/\/twitter.com\/miamiuit\/status\/1534204307901489153\">on Tuesday<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Higher education has long been one of OWL Labs major industries, but the company markets widely to  companies, government agencies and courtrooms, claiming more than <a href=\"https:\/\/owllabs.eu\/about\">100,000 organizations use its technology<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>OWL Labs, a vendor of video-conferencing devices used in 2,000 education organizations, is urging customers to patch several vulnerabilities.<\/p>\n","protected":false},"author":251,"featured_media":21079,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"disable_grayscale_images":true,"grayscale_contrast":0,"sponsored_content":false,"display_author_bio":true,"story_type":"","footnotes":""},"categories":[10115,10117],"tags":[2855,11816,11817],"people":[],"special-report":[],"authors":[7155],"class_list":["post-21073","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-hybrid-learning","tag-video-conferencing","tag-owl-labs","tag-cisa","author-emily-bamforth"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.8 (Yoast SEO v27.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Hybrid meeting vendor OWL Labs urges updates to patch security issues | EdScoop<\/title>\n<meta name=\"description\" content=\"OWL Labs, a vendor of video-conferencing devices used in 2,000 education organizations, is urging customers to patch several vulnerabilities.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hybrid meeting vendor OWL Labs urges updates to patch security issues | EdScoop\" \/>\n<meta property=\"og:description\" content=\"OWL Labs, a vendor of video-conferencing devices used in 2,000 education organizations, is urging customers to patch several vulnerabilities.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/\" \/>\n<meta property=\"og:site_name\" content=\"EdScoop\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sngedscoop\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-06-08T13:54:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-08T20:39:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-content\/uploads\/sites\/4\/2022\/06\/285721691_549564973286720_2911542468176873276_n.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2048\" \/>\n\t<meta property=\"og:image:height\" content=\"1536\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Emily Bamforth\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@EdScoop_news\" \/>\n<meta name=\"twitter:site\" content=\"@EdScoop_news\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/owl-labs-vulnerability-patch-cisa\\\/\",\"url\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/owl-labs-vulnerability-patch-cisa\\\/\",\"name\":\"Hybrid meeting vendor OWL Labs urges updates to patch security issues | EdScoop\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/owl-labs-vulnerability-patch-cisa\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/owl-labs-vulnerability-patch-cisa\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/wp-content\\\/uploads\\\/sites\\\/4\\\/2022\\\/06\\\/285721691_549564973286720_2911542468176873276_n.jpg\",\"datePublished\":\"2022-06-08T13:54:23+00:00\",\"dateModified\":\"2022-06-08T20:39:18+00:00\",\"description\":\"OWL Labs, a vendor of video-conferencing devices used in 2,000 education organizations, is urging customers to patch several vulnerabilities.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/owl-labs-vulnerability-patch-cisa\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/owl-labs-vulnerability-patch-cisa\\\/#primaryimage\",\"url\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/wp-content\\\/uploads\\\/sites\\\/4\\\/2022\\\/06\\\/285721691_549564973286720_2911542468176873276_n.jpg\",\"contentUrl\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/wp-content\\\/uploads\\\/sites\\\/4\\\/2022\\\/06\\\/285721691_549564973286720_2911542468176873276_n.jpg\",\"width\":2048,\"height\":1536,\"caption\":\"(Scoop News Group)\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/#website\",\"url\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/\",\"name\":\"EdScoop\",\"description\":\"Essential higher ed and K-12 information technology news\",\"publisher\":{\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/#organization\",\"name\":\"EdScoop\",\"url\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/wp-content\\\/uploads\\\/sites\\\/4\\\/2023\\\/01\\\/EdScoop-Black.png\",\"contentUrl\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/wp-content\\\/uploads\\\/sites\\\/4\\\/2023\\\/01\\\/EdScoop-Black.png\",\"width\":1098,\"height\":187,\"caption\":\"EdScoop\"},\"image\":{\"@id\":\"https:\\\/\\\/scoopmedia-develop.go-vip.net\\\/edscoop\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/sngedscoop\\\/\",\"https:\\\/\\\/x.com\\\/EdScoop_news\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/edscoop\",\"https:\\\/\\\/www.youtube.com\\\/@edscoop\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Hybrid meeting vendor OWL Labs urges updates to patch security issues | EdScoop","description":"OWL Labs, a vendor of video-conferencing devices used in 2,000 education organizations, is urging customers to patch several vulnerabilities.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/","og_locale":"en_US","og_type":"article","og_title":"Hybrid meeting vendor OWL Labs urges updates to patch security issues | EdScoop","og_description":"OWL Labs, a vendor of video-conferencing devices used in 2,000 education organizations, is urging customers to patch several vulnerabilities.","og_url":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/","og_site_name":"EdScoop","article_publisher":"https:\/\/www.facebook.com\/sngedscoop\/","article_published_time":"2022-06-08T13:54:23+00:00","article_modified_time":"2022-06-08T20:39:18+00:00","og_image":[{"width":2048,"height":1536,"url":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-content\/uploads\/sites\/4\/2022\/06\/285721691_549564973286720_2911542468176873276_n.jpg","type":"image\/jpeg"}],"author":"Emily Bamforth","twitter_card":"summary_large_image","twitter_creator":"@EdScoop_news","twitter_site":"@EdScoop_news","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/","url":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/","name":"Hybrid meeting vendor OWL Labs urges updates to patch security issues | EdScoop","isPartOf":{"@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/#website"},"primaryImageOfPage":{"@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/#primaryimage"},"image":{"@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/#primaryimage"},"thumbnailUrl":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-content\/uploads\/sites\/4\/2022\/06\/285721691_549564973286720_2911542468176873276_n.jpg","datePublished":"2022-06-08T13:54:23+00:00","dateModified":"2022-06-08T20:39:18+00:00","description":"OWL Labs, a vendor of video-conferencing devices used in 2,000 education organizations, is urging customers to patch several vulnerabilities.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/owl-labs-vulnerability-patch-cisa\/#primaryimage","url":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-content\/uploads\/sites\/4\/2022\/06\/285721691_549564973286720_2911542468176873276_n.jpg","contentUrl":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-content\/uploads\/sites\/4\/2022\/06\/285721691_549564973286720_2911542468176873276_n.jpg","width":2048,"height":1536,"caption":"(Scoop News Group)"},{"@type":"WebSite","@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/#website","url":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/","name":"EdScoop","description":"Essential higher ed and K-12 information technology news","publisher":{"@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/#organization","name":"EdScoop","url":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/#\/schema\/logo\/image\/","url":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-content\/uploads\/sites\/4\/2023\/01\/EdScoop-Black.png","contentUrl":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-content\/uploads\/sites\/4\/2023\/01\/EdScoop-Black.png","width":1098,"height":187,"caption":"EdScoop"},"image":{"@id":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/sngedscoop\/","https:\/\/x.com\/EdScoop_news","https:\/\/www.linkedin.com\/company\/edscoop","https:\/\/www.youtube.com\/@edscoop"]}]}},"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"EdScoop","distributor_original_site_url":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop","push-errors":false,"jetpack_featured_media_url":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-content\/uploads\/sites\/4\/2022\/06\/285721691_549564973286720_2911542468176873276_n.jpg","_links":{"self":[{"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/posts\/21073","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/users\/251"}],"replies":[{"embeddable":true,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/comments?post=21073"}],"version-history":[{"count":10,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/posts\/21073\/revisions"}],"predecessor-version":[{"id":21089,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/posts\/21073\/revisions\/21089"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/media\/21079"}],"wp:attachment":[{"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/media?parent=21073"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/categories?post=21073"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/tags?post=21073"},{"taxonomy":"people","embeddable":true,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/people?post=21073"},{"taxonomy":"special-report","embeddable":true,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/special-report?post=21073"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/scoopmedia-develop.go-vip.net\/edscoop\/wp-json\/wp\/v2\/authors?post=21073"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}