Cybersecurity, IoT, Security Awareness and Social Engineering

Brits Ban Default Passwords — and More IoT Stupidity

Security Boulevard

APRIL 30, 2024

The UK’s Product Security and Telecommunications Infrastructure Act aims to improve the security of net-connected consumer gear. The post Brits Ban Default Passwords — and More IoT Stupidity appeared first on Security Boulevard.

IoT

IoT Passwords Social Engineering Telecommunications

EPA and White House Raise Alarm on Water Cybersecurity

Security Boulevard

MARCH 20, 2024

lacks “even basic cybersecurity precautions.” The post EPA and White House Raise Alarm on Water Cybersecurity appeared first on Security Boulevard. Iran and China fingered: Biden admin. chides governors: Water infra.

Cybersecurity

Cybersecurity Digital transformation Social Engineering Engineering

Cybersecurity Training and Tech Aren’t Enough; ‘Culture Change’ Needed

eSecurity Planet

AUGUST 8, 2022

Companies spend a staggering amount of money on cybersecurity products to defend their networks and data from hackers, but a couple of industry pros say that money is wasted if companies don’t change their internal cybersecurity culture. In 2004, the global cybersecurity market was worth just $3.5 trillion by 2025.

Cybersecurity

Cybersecurity Technology Social Engineering IoT

Webinars

Reimagining Cybersecurity Training: Driving Real Impact on Security Culture

MORE WEBINARS

Cheap Video Doorbell Cams: Tools of Stalkers and Thieves

Security Boulevard

MARCH 1, 2024

EKEN IoT FAIL: Amazon, Sears and Shein still sell security swerving stuff. The post Cheap Video Doorbell Cams: Tools of Stalkers and Thieves appeared first on Security Boulevard.

IoT

IoT Social Engineering Internet Internet

ENISA 2023 Threat Landscape Report: Key Findings and Recommendations

Thales Cloud Protection & Licensing

DECEMBER 4, 2023

ENISA 2023 Threat Landscape Report: Key Findings and Recommendations madhav Tue, 12/05/2023 - 05:36 The European Union Agency for Cybersecurity (ENISA) recently released its annual Threat Landscape Report for 2023. But the new model, social engineering, is also emerging, an approach that consists of deceiving victims in the physical world.

Social Engineering

Social Engineering Backups Manufacturing DDOS

Cyber CEO – Cyber Hygiene is More Critical for Your Business Now Than Ever Before – Here’s Why

Herjavec Group

MAY 19, 2022

So it should go without saying that enterprise security programs should be built with this in mind ! Conduct regular social engineering tests on your employees to actively demonstrate where improvements need to be made. There is no one-size-fits-all solution when it comes to cybersecurity.

Penetration Testing

Penetration Testing Social Engineering Cybercrime InfoSec

Irony of Ironies: CISA Hacked — ‘by China’

Security Boulevard

MARCH 11, 2024

Cybersecurity and Infrastructure Security Agency penetrated in February, via vuln in Ivanti. The post Irony of Ironies: CISA Hacked — ‘by China’ appeared first on Security Boulevard. Free rides and traffic jams: U.S.

Hacking

Hacking Cybersecurity Social Engineering Data privacy

What Is Penetration Testing? Complete Guide & Steps

eSecurity Planet

MARCH 7, 2023

Limited tests can focus on narrower targets such as networks, Internet of Things (IoT) devices, physical security, cloud security, web applications, or other system components. Additionally, the methodology is updated and helps the security community stay on top of the latest technologies.

Penetration Testing

Penetration Testing Wireless Passwords Social Engineering

Apple API Allows Wi-Fi AP Location Tracking

Security Boulevard

MAY 23, 2024

The post Apple API Allows Wi-Fi AP Location Tracking appeared first on Security Boulevard. Privacy FAIL: Apple location service returns far more data than it should, to people who have no business knowing it, without your permission.

Social Engineering

Social Engineering Data privacy Engineering Security Awareness

Meet the 2021 SC Awards judges

SC Magazine

MAY 1, 2021

Each year, a select pool of experts from the cybersecurity community sets hours aside to review hundreds of entries received for the SC Trust and Excellence Awards. Dan Basile is the chief information security officer for the RELLIS campus at the Texas A&M University System and director of Statewide Cybersecurity Services.

Computers and Electronics

Computers and Electronics Technology Education Information Security

Ransomware Prevention, Detection, and Simulation

NetSpi Executives

APRIL 27, 2024

Ransomware, a definition Ransomware is a set of malware technologies, hacking techniques, and social engineering tactics that cybercriminals use to cause harm, breach data, and render data unusable. Ransomware attackers get into a network in many ways: Social engineering. Unpatched exploits.

Ransomware

Ransomware Cyber Insurance Backups Insurance

Watch This? Patch This! LG Fixes Smart TV Vulns

Security Boulevard

APRIL 10, 2024

LG Fixes Smart TV Vulns appeared first on Security Boulevard. 4×CVE=RCE or Merely CE? Update your LG TV now, or let hackers root it. But is Bitdefender overhyping the issue? The post Watch This? Patch This!

Social Engineering

Social Engineering IoT Data privacy Engineering

SHOCKER: Senate Says Security Sucks—Still

Security Boulevard

AUGUST 5, 2021

A Senate committee graded cybersecurity as poor among eight big agency departments. The post SHOCKER: Senate Says Security Sucks—Still appeared first on Security Boulevard. Not much has changed since the last report.

Cybersecurity

Cybersecurity Social Engineering Security Awareness Engineering

South Korean iPhone Ban: MDM DMZ PDQ

Security Boulevard

APRIL 29, 2024

The post South Korean iPhone Ban: MDM DMZ PDQ appeared first on Security Boulevard. MDM Hindered: Android phones are still OK; this is Samsung’s home, after all.

Social Engineering

Social Engineering Data privacy Engineering IoT

House Passes Privacy-Preserving Bill, but Biden Blasts it

Security Boulevard

APRIL 18, 2024

It says the bill “threatens national security.” The post House Passes Privacy-Preserving Bill, but Biden Blasts it appeared first on Security Boulevard. Are you a FANFSA fan? The White House isn’t.

Social Engineering

Social Engineering Advertising Data privacy Engineering

FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair?

Security Boulevard

APRIL 5, 2024

appeared first on Security Boulevard. Fast enough for government work: The Federal Communications Commission is finally minded to do something about decades-old vulnerabilities. The post FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair?

Government

Government Digital transformation Social Engineering Telecommunications

‘Total Bollocks’ — No, Your Toothbrush isn’t DDoS’ing

Security Boulevard

FEBRUARY 7, 2024

The post ‘Total Bollocks’ — No, Your Toothbrush isn’t DDoS’ing appeared first on Security Boulevard. PR FAIL: Were 3 million toothbrushes hacked into a botnet? Or does a Fortinet spokeschild have egg on his face?

Hacking

Hacking Social Engineering DDOS Internet

ALERT: Thieves??Wi-Fi Camera Jammers

Security Boulevard

FEBRUARY 14, 2024

I❤️POE: Does your home security need a rethink? The post ALERT: Thieves❤️Wi-Fi Camera Jammers appeared first on Security Boulevard. Wireless cameras are kinda useless, say cops.

Wireless

Wireless Social Engineering Internet Internet

PRC State Hacking: ‘Chinese Edward Snowden’ Spills I?Soon Secrets in Huge Dump of TTPs

Security Boulevard

FEBRUARY 22, 2024

The post PRC State Hacking: ‘Chinese Edward Snowden’ Spills I‑Soon Secrets in Huge Dump of TTPs appeared first on Security Boulevard. Underpaid, overworked and angry: Whistleblower in hacker contractor firm for Chinese government blows lid off tactics, techniques and procedures.

Hacking

Hacking Government Digital transformation Social Engineering

Mapping CVEs and ATT&CK Framework TTPs: An Empirical Approach

NopSec

OCTOBER 11, 2022

Information technology and cybersecurity professionals use CVE Records to ensure they are discussing the same issue, and to coordinate their efforts to prioritize and address the vulnerabilities.” Therefore, using both ATT&CK and CAPEC is required for a comprehensive security perspective. Download the free playbook today.

Software

Software IoT Cyber Attacks Social Engineering

North Korea IT Worker Scam Brings Malware and Funds Nukes

Security Boulevard

MAY 17, 2024

The post North Korea IT Worker Scam Brings Malware and Funds Nukes appeared first on Security Boulevard. DPRK IT WFH: Justice Department says N. Korean hackers are getting remote IT jobs, posing as Americans.

Scams

Scams Malware Social Engineering Data privacy

Linux Vendors Squawk: PATCH NOW — CVSS 9.8 Bootkit Bug in shim.efi

Security Boulevard

FEBRUARY 8, 2024

Bootkit Bug in shim.efi appeared first on Security Boulevard. Snow joke: A Microsoft researcher found it—and it’s somehow Microsoft’s fault. The post Linux Vendors Squawk: PATCH NOW — CVSS 9.8

Social Engineering

Social Engineering Data privacy Engineering IoT

FBI Warning: China Will Hack US Infra. (via Router Botnet)

Security Boulevard

FEBRUARY 1, 2024

via Router Botnet) appeared first on Security Boulevard. a/k/a BRONZE SILHOUETTE: FBI head Wray won’t tolerate China’s “real-world threat to our physical safety.” The post FBI Warning: China Will Hack US Infra.

Hacking

Hacking Social Engineering Data privacy Engineering

Okta Screws Up (Yet Again) — ALL Customers’ Data Hacked, not just 1%

Security Boulevard

NOVEMBER 29, 2023

The post Okta Screws Up (Yet Again) — ALL Customers’ Data Hacked, not just 1% appeared first on Security Boulevard. You had one job: Last month’s sheer incompetence descends this week into UTTER FARCE.

Hacking

Hacking Social Engineering Authentication Architecture

HALT! I am Reptar! Intel CPU Bug Panics Cloud Providers

Security Boulevard

NOVEMBER 15, 2023

Intel CPU Bug Panics Cloud Providers appeared first on Security Boulevard. IaaS Catch Fire: Google and Intel fuzz, find and fix a fabulous bug. Next up: More of the same. The post HALT! I am Reptar!

Social Engineering

Social Engineering Engineering IoT Security Awareness

FBI Warns: Ubiquiti EdgeRouter is STILL Not Secure

Security Boulevard

FEBRUARY 28, 2024

The post FBI Warns: Ubiquiti EdgeRouter is STILL Not Secure appeared first on Security Boulevard. GRU APT28 is back again: Fancy Bear still hacking ubiquitous gear, despite patch availability.

Hacking

Hacking Social Engineering Data privacy Authentication

Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!)

Security Boulevard

APRIL 3, 2023

appeared first on Security Boulevard. Déjà Vu: Hack of WD systems leads to My Cloud service outage. Owners unable to access files. The post Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!)

Hacking

Hacking Social Engineering IoT Security Awareness

SSH FAIL: Terrapin Attack Smashes ‘Secure’ Shell Spec

Security Boulevard

DECEMBER 20, 2023

The post SSH FAIL: Terrapin Attack Smashes ‘Secure’ Shell Spec appeared first on Security Boulevard. Testy Testudine: Lurking vuln in SSH spec means EVERY implementation must build patches.

Digital transformation

Digital transformation Social Engineering Data privacy Authentication

Tesla Staff Shared Saucy Snaps of Customers (Sources Say)

Security Boulevard

APRIL 7, 2023

The post Tesla Staff Shared Saucy Snaps of Customers (Sources Say) appeared first on Security Boulevard. I guess I’m banned from Twitter now: Tesla employees mocked and memeified private photos and videos. Firm’s message boards were full of the stuff.

Social Engineering

Social Engineering IoT Security Awareness Engineering

‘Finish Him!’ US Kills Huawei With Final Tech Ban

Security Boulevard

FEBRUARY 1, 2023

US Kills Huawei With Final Tech Ban appeared first on Security Boulevard. cuts off Huawei’s last sources of technology. Export licenses for chips and other tech components are finished. The post ‘Finish Him!’

Technology

Technology Social Engineering IoT Security Awareness

‘BrutePrint’ Unlocks Android Phones — Chinese Researchers

Security Boulevard

MAY 24, 2023

Or, at least, OLDER phones: SPI/TEE MITM FAIL The post ‘BrutePrint’ Unlocks Android Phones — Chinese Researchers appeared first on Security Boulevard.

Social Engineering

Social Engineering Authentication IoT Security Awareness

CES 2023 FAIL: Worst in Show for Security and Privacy

Security Boulevard

JANUARY 9, 2023

But some vendors faced stiff criticism over their privacy and security stances. The post CES 2023 FAIL: Worst in Show for Security and Privacy appeared first on Security Boulevard. The Consumer Electronics Show wrapped up yesterday.

Social Engineering

Social Engineering IoT Security Awareness Engineering

‘LitterDrifter’ Russian USB Worm Leaks from Ukraine War Zone

Security Boulevard

NOVEMBER 22, 2023

The post ‘LitterDrifter’ Russian USB Worm Leaks from Ukraine War Zone appeared first on Security Boulevard. FSB APT USB VBS LNK DLL: WTH? Flash drive sharing malware escapes Україна. Gamaredon fingered as perps.

Malware

Malware Social Engineering Data privacy Engineering

FCC’s Got New Rules for SIM-Swap and Port-Out Fraud

Security Boulevard

NOVEMBER 20, 2023

The post FCC’s Got New Rules for SIM-Swap and Port-Out Fraud appeared first on Security Boulevard. Too many times: Federal Communications Commission shuts stable door after horse bolted. But chairwoman Jessica Rosenworcel (pictured) was hoping it would save us.

Social Engineering

Social Engineering Authentication Scams Data privacy

Stalking: Fear of Apple AirTag ‘Explodes’ — Lawsuit Momentum Grows

Security Boulevard

OCTOBER 13, 2023

The post Stalking: Fear of Apple AirTag ‘Explodes’ — Lawsuit Momentum Grows appeared first on Security Boulevard. This is why we can’t have nice things: 38 victims of Apple’s “negligence” named in amended class action.

Social Engineering

Social Engineering Data privacy Engineering IoT

Android Foils AirTag Stalkers and Thieves — While Apple Does Nothing

Security Boulevard

JULY 28, 2023

The post Android Foils AirTag Stalkers and Thieves — While Apple Does Nothing appeared first on Security Boulevard. C’mon Cupertino: “Unknown Tracker Detected,” your phone screams.

Social Engineering

Social Engineering IoT Security Awareness Engineering

Best of 2023: Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!)

Security Boulevard

JANUARY 2, 2024

appeared first on Security Boulevard. Déjà Vu: Hack of WD systems leads to My Cloud service outage. Owners unable to access files. The post Best of 2023: Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!)

Hacking

Hacking Social Engineering IoT Security Awareness

OpenSSL ‘CRITICAL’ Bug — Sky Falling — Patch Hits 11/1

Security Boulevard

OCTOBER 28, 2022

The post OpenSSL ‘CRITICAL’ Bug — Sky Falling — Patch Hits 11/1 appeared first on Security Boulevard. OpenSSL has a new ‘critical’ bug. But it’s a secret until next month.

Social Engineering

Social Engineering Security Awareness Engineering IoT

Your Personal Data Sold to US Intelligence Agencies

Security Boulevard

JUNE 14, 2023

The post Your Personal Data Sold to US Intelligence Agencies appeared first on Security Boulevard. What Price 4th Amendment? Warrant not needed if info bought from brokers.

Social Engineering

Social Engineering IoT Security Awareness Engineering

LEAKED: Intel’s BIOS Source Code — All 6GB of It

Security Boulevard

OCTOBER 11, 2022

The post LEAKED: Intel’s BIOS Source Code — All 6GB of It appeared first on Security Boulevard. Source code for the Intel Alder Lake processor EUFI BIOS has gone walkies. 4chan is said to be involved.

Social Engineering

Social Engineering Security Awareness Engineering IoT

FBI/CISA Failed: Biden’s Ransomware Summit Convenes, Impotently

Security Boulevard

NOVEMBER 1, 2022

The post FBI/CISA Failed: Biden’s Ransomware Summit Convenes, Impotently appeared first on Security Boulevard. The International Counter Ransomware Summit is on in D.C., with 36 nations and blocs. But will it amount to anything of substance?

Ransomware

Ransomware Social Engineering Security Awareness Engineering

More Lies: Anker’s Eufy Pants on Fire — ‘No Cloud’ Cams Send to Cloud

Security Boulevard

DECEMBER 2, 2022

Eufy home security cameras and doorbells are insecure: They send your photos to the cloud without permission and serve up video across the internet without encryption. The post More Lies: Anker’s Eufy Pants on Fire — ‘No Cloud’ Cams Send to Cloud appeared first on Security Boulevard.

Internet

Internet Internet Encryption Social Engineering

MiCODUS Car Trackers are SUPER Vulnerable and Dangerous

Security Boulevard

JULY 21, 2022

The post MiCODUS Car Trackers are SUPER Vulnerable and Dangerous appeared first on Security Boulevard. An add-on vehicle tracker is incredibly insecure—to the point it’s dangerous to use. The MV720 and other products sold by MiCODUS are full of easily exploited bugs.

Social Engineering

Social Engineering IoT Passwords Security Awareness

‘Incompetent’ Tesla Lets Hackers Steal Cars — via Bluetooth

Security Boulevard

MAY 19, 2022

The post ‘Incompetent’ Tesla Lets Hackers Steal Cars — via Bluetooth appeared first on Security Boulevard. Tesla cars can be unlocked and stolen via a simple relay attack. The company shrugged and said it’s “a known limitation.”.

Social Engineering

Social Engineering IoT Security Awareness Engineering

Brits Ban Default Passwords — and More IoT Stupidity

EPA and White House Raise Alarm on Water Cybersecurity

Webinars

Trending Sources

Cybersecurity Training and Tech Aren’t Enough; ‘Culture Change’ Needed

Webinars

Cheap Video Doorbell Cams: Tools of Stalkers and Thieves

ENISA 2023 Threat Landscape Report: Key Findings and Recommendations

Cyber CEO – Cyber Hygiene is More Critical for Your Business Now Than Ever Before – Here’s Why

Irony of Ironies: CISA Hacked — ‘by China’

What Is Penetration Testing? Complete Guide & Steps

Apple API Allows Wi-Fi AP Location Tracking

Meet the 2021 SC Awards judges

Ransomware Prevention, Detection, and Simulation

Watch This? Patch This! LG Fixes Smart TV Vulns

SHOCKER: Senate Says Security Sucks—Still

South Korean iPhone Ban: MDM DMZ PDQ

House Passes Privacy-Preserving Bill, but Biden Blasts it

FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair?

‘Total Bollocks’ — No, Your Toothbrush isn’t DDoS’ing

ALERT: Thieves??Wi-Fi Camera Jammers

PRC State Hacking: ‘Chinese Edward Snowden’ Spills I?Soon Secrets in Huge Dump of TTPs

Mapping CVEs and ATT&CK Framework TTPs: An Empirical Approach

North Korea IT Worker Scam Brings Malware and Funds Nukes

Linux Vendors Squawk: PATCH NOW — CVSS 9.8 Bootkit Bug in shim.efi

FBI Warning: China Will Hack US Infra. (via Router Botnet)

Okta Screws Up (Yet Again) — ALL Customers’ Data Hacked, not just 1%

HALT! I am Reptar! Intel CPU Bug Panics Cloud Providers

FBI Warns: Ubiquiti EdgeRouter is STILL Not Secure

Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!)

SSH FAIL: Terrapin Attack Smashes ‘Secure’ Shell Spec

Tesla Staff Shared Saucy Snaps of Customers (Sources Say)

‘Finish Him!’ US Kills Huawei With Final Tech Ban

‘BrutePrint’ Unlocks Android Phones — Chinese Researchers

CES 2023 FAIL: Worst in Show for Security and Privacy

‘LitterDrifter’ Russian USB Worm Leaks from Ukraine War Zone

FCC’s Got New Rules for SIM-Swap and Port-Out Fraud

Stalking: Fear of Apple AirTag ‘Explodes’ — Lawsuit Momentum Grows

Android Foils AirTag Stalkers and Thieves — While Apple Does Nothing

Best of 2023: Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!)

OpenSSL ‘CRITICAL’ Bug — Sky Falling — Patch Hits 11/1

Your Personal Data Sold to US Intelligence Agencies

LEAKED: Intel’s BIOS Source Code — All 6GB of It

FBI/CISA Failed: Biden’s Ransomware Summit Convenes, Impotently

More Lies: Anker’s Eufy Pants on Fire — ‘No Cloud’ Cams Send to Cloud

MiCODUS Car Trackers are SUPER Vulnerable and Dangerous

‘Incompetent’ Tesla Lets Hackers Steal Cars — via Bluetooth

Stay Connected