If you use a Logitech Unifying Receiver (also knows as the wireless dongle) download and install the latest firmware update to protect against vulnerabilities. Unless you’ve updated the firmware, the Logitech Unifying Receiver is still vulnerable to an issue discovered in 2016 as well as some newly discovered vulnerabilities.
Logitech didn’t recall the Unifying Receiver back in 2016 when the hack called “Mousejack” appeared. Many of the Unifying Receivers were still on the market, though Logitech started releasing updated dongles sold with mice, keyboard and stand alone receivers. Not long after the discovery, Logitech issued a firmware update but it wasn’t widely known and the firmware isn’t all that easy to find on the site. If you didn’t update the firmware then (and most of us didn’t know about it) now is a good time to get the update as new vulnerabilities have been discovered.
A Logitech wireless mouse I purchased last year didn’t have an updated Unifying Receiver included so I wouldn’t assume newly purchased items have updated firmware. If you have any extra Logitech wireless dongles around (I have several) you may want to update them.
If you use a Logitech wireless device you’ve probably installed a program containing the drivers and software to configure the device such as SetPoint for Logitech mice. The firmware update for the Unifying Receiver isn’t included in the device software and isn’t included in updates to the Unifying Receiver software – it needs to be downloaded and installed separately.
Logitech isn’t the only company that’s been affected; any device that uses the same Nordic and Texas Instruments chips and firmware for wireless receivers are impacted, including devices from Microsoft, Dell, HP, and Lenovo. If you use a wireless device from one of those companies, you might want to check if the firmware can be updated. Logitech lets you update the firmware on the wireless dongle.
Logitech’s announcement (including links to the firmware update) are here: Logitech Response to Research Findings.
I’ve added direct download links to the Unifying Receiver firmware update for PC, Mac and the G900 gaming mouse:
Mac: https://aws13-customer-care-assets.s3.amazonaws.com/Software/SecureDFU/Mac/SecureDFU.zip
PC: https://aws13-customer-care-assets.s3.amazonaws.com/Software/SecureDFU/Win/SecureDFU_48.exe
G900 gaming mouse: http://www.logitech.com/pub/techsupport/gaming/G900Update_1.5.23.exe
Logitech notes that if you have the K780 multi-device wireless keyboard, K375s multi-device keyboard, wireless touch keyboard K400 plus, MK850 performance or illuminated living-room keyboard K830 connected with your Unifying receiver, the tool will guide you to update the firmware on the keyboard as well.
(h/t betanews)