2018 and IoT - Cyber Security Informer

The UK Bans Default Passwords

Schneier on Security

MAY 2, 2024

The UK is the first country to ban default passwords on IoT devices. On Monday, the United Kingdom became the first country in the world to ban default guessable usernames and passwords from these IoT devices. It banned default passwords in 2018, the law taking effect in 2020. This sort of thing benefits all of us everywhere.

Passwords

Passwords IoT Manufacturing Telecommunications

STEPS FORWARD: Regulators are on the move to set much needed IoT security rules of the road

The Last Watchdog

SEPTEMBER 5, 2023

New government rules coupled with industry standards meant to give formal shape to the Internet of Things (IoT) are rapidly quickening around the globe. When it comes to IoT, we must arrive at specific rules of the road if we are to tap into the full potential of smart cities, autonomous transportation and advanced healthcare.

IoT

IoT Government Internet Internet

Evolution of threat landscape for IoT devices – H1 2018

Security Affairs

SEPTEMBER 19, 2018

Security experts from Kaspersky have published an interesting report on the new trends in the IoT threat landscape. What is infecting IoT devices and how? The researchers set up a honeypot to collect data on infected IoT devices, the way threat actors infect IoT devices and what families of malware are involved.

IoT

IoT Passwords Malware Advertising

Webinars

Reimagining Cybersecurity Training: Driving Real Impact on Security Culture

MORE WEBINARS

IoT Cybersecurity Bill Proposed to Congress

Adam Levin

MARCH 13, 2019

Congress proposed a bill to improve the security of internet-enabled devices called the Internet of Things (IoT) Cybersecurity Improvement Act of 2019. IoT devices have long been a weak point in the cybersecurity of agencies and organizations and have also been a favorite target for hackers, despite their continuous market growth.

IoT

IoT Cybersecurity Internet Internet

Measuring the Security of IoT Devices

Schneier on Security

OCTOBER 3, 2019

In August, CyberITL completed a large-scale survey of software security practices in the IoT environment, by looking at the compiled software. Data Collected: 22 Vendors 1,294 Products 4,956 Firmware versions 3,333,411 Binaries analyzed Date range of data: 2003-03-24 to 2019-01-24 (varies by vendor, most up to 2018 releases). [.].

IoT

IoT Firmware Data collection Architecture

Malvertising Campaign Targets IoT Devices: GeoEdge

eSecurity Planet

AUGUST 9, 2021

A malicious advertising campaign originating out of Eastern Europe and operating since at least mid-June is targeting Internet of Things (IoT) devices connected to home networks, according to executives with GeoEdge, which offers ad security and quality solutions to online and mobile advertisers. Malvertising is Evolving.

IoT

IoT Advertising Identity Theft Mobile

The IoT Cybersecurity Act of 2020: Implications for Devices

eSecurity Planet

JANUARY 22, 2021

billion Internet of Things (IoT) devices. As more information about IoT device vulnerabilities is published, the pressure on industry and government authorities to enhance security standards might be reaching a tipping point. government, standards will not apply to the IoT market at-large. Implications for IoT devices.

IoT

IoT Cybersecurity Manufacturing Government

Kaspersky honeypots find 105 million attacks on IoT devices in first half of 2019

Tech Republic Security

OCTOBER 15, 2019

The number of attacks on IoT devices in 2019 is nine times greater than the number found in the first half of 2018.

IoT

Mozi Botnet is responsible for most of the IoT Traffic

Security Affairs

SEPTEMBER 20, 2020

The Mozi botnet accounted for 90% of the IoT network traffic observed between October 2019 and June 2020, IBM reported. Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. ” reads the report published by IBM. ” continues the analysis.

IoT

IoT DDOS Architecture Passwords

BotenaGo botnet targets millions of IoT devices using 33 exploits

Security Affairs

NOVEMBER 11, 2021

Researchers at AT&T discovered a new BotenaGo botnet that is using thirty three exploits to target millions of routers and IoT devices. BotenaGo is a new botnet discovered by researchers at AT&T that leverages thirty three exploits to target millions of routers and IoT devices. CVE-2018-10088 XiongMai uc-httpd 1.0.0

IoT

IoT Firmware Malware Wireless

Here’s how anyone with $20 can hire an IoT botnet to blast out a week-long DDoS attack

The Last Watchdog

AUGUST 27, 2018

This is borne out by Akamai Technologies’ Summer 2018 Internet Security/Web Attack Report. A nascent cottage industry is starting to gel around DDoS botnets-for-hire , comprised of millions of compromised IoT devices. I had the chance to visit with Don Shin, A10 Networks’ Senior Product Marketing Manager, at Black Hat USA 2018.

DDOS

DDOS IoT Digital transformation Internet

Reading the ENISA Threat Landscape Report 2018

Security Affairs

JANUARY 30, 2019

According to the ENISA Threat Landscape Report 2018, 2018 has brought significant changes in the techniques, tactics, and procedures associated with cybercrime organizations and nation-state actors. 2018 was characterized by significant changes in the cyber threat landscape especially for TTPs associated with threat agent groups. .

Cyber threats

Cyber threats IoT Social Engineering Advertising

New DigiCert poll shows companies taking monetary hits due to IoT-related security missteps

The Last Watchdog

NOVEMBER 15, 2018

Even as enterprises across the globe hustle to get their Internet of Things business models up and running, there is a sense of foreboding about a rising wave of IoT-related security exposures. And, in fact, IoT-related security incidents have already begun taking a toll at ill-prepared companies. Tiered performances.

IoT

IoT Encryption Authentication Penetration Testing

5 IoT Security Predictions for 2019

Security Affairs

DECEMBER 21, 2018

2018 was the year of the Internet of Things (IoT), massive attacks and various botnets hit smart devices, These are 5 IoT Security Predictions for 2019. IoT Attacks in 2018. Do the increased attacks mean the industry is becoming accustomed to IoT cyber attacks? Three IoT Attack Avenues for 2019.

IoT

IoT Manufacturing Internet Internet

ThreatList: Malware Samples Targeting IoT More Than Double in 2018

Threatpost

SEPTEMBER 18, 2018

A honeypot set up to sniff out data on infected IoT devices found a broad array of compromised devices – from Mikrotik routers to dishwashers.

IoT

IoT Malware

IoT and Machine Identity Management in Financial Services

Security Boulevard

JUNE 28, 2022

IoT and Machine Identity Management in Financial Services. How is IoT changing the financial sector? IoT has already positively impacted the financial sector and will only continue to in the future. The most notable and well-documented example of investment in the IoT infrastructure has been by retail banks.

Financial Services

Financial Services IoT Banking Retail

FreeRTOS flaws expose millions of IoT devices to cyber attacks

Security Affairs

OCTOBER 22, 2018

The researcher Ori Karliner and his team analyzed some of the most popular operating systems in the IoT market, including the FreeRTOS. FreeRTOS is an open-source operating system that runs on most of the small microprocessors and microcontrollers in IoT devices. CVE-2018-16522. CVE-2018-16525. CVE-2018-16526.

IoT

IoT Cyber Attacks Internet Internet

Creator of multiple IoT botnets, including Satori, pleaded guilty

Security Affairs

SEPTEMBER 4, 2019

Kenneth Currin Schuchman (21) from Vancouver, Washington pleaded guilty to creating and operating multiple DDoS IoT botnet , including Satori. Kenneth Currin Schuchman (21) from Vancouver, Washington, aka Nexus Zeta, pleaded guilty to creating and operating multiple DDoS IoT botnets. Pierluigi Paganini.

IoT

IoT DDOS Internet Internet

Sonicwall warns of a spike in the number of attacks involving encrypted malware and IoT malware

Security Affairs

JULY 29, 2019

In 2018, global malware volume recorded by SonicWall hit a record-breaking 10.52 “The United States (-17%) and United Kingdom (-9%) led the world in the amount of malware attacks faced, but total volume for both were down year to date compared to 2018.” ” In 2018 Sonicwall had logged more than 2.8

IoT

IoT Encryption Malware Advertising

A look back on 2018: What was hype and what was, perhaps, underrated

Thales Cloud Protection & Licensing

DECEMBER 4, 2018

As we close in on the final few days of the year and look ahead to the clean slate that 2019 represents, I wanted to take a few moments to reflect on 2018 – specifically, what tech innovations and predictions held true, which fell a bit flat and which were entirely unexpected. IoT in Everything. Assume IoT Security Vulnerabilities.

IoT

IoT Cryptocurrency Technology Data privacy

Securing the future of IoT devices

CyberSecurity Insiders

FEBRUARY 12, 2021

The worldwide number of IoT-connected devices is projected to increase to 43 billion by 2023 , an almost threefold increase from 2018 , demonstrating the pace at which the world is becoming more connected. The post Securing the future of IoT devices appeared first on Cybersecurity Insiders. Interested and want to learn more?

IoT

IoT Architecture Authentication Technology

Pwn2Own Tokyo 2018 – iPhone X exploits paid over $100,000

Security Affairs

NOVEMBER 14, 2018

The Zero Day Initiative’s Pwn2Own Tokyo 2018 is a success, participants earned over $300,000 for disclosing flaws affecting iPhone X, Xiaomi Mi 6 and Samsung Galaxy S9 smartphones. During the first day of the Pwn2Own Tokyo 2018 contest, participants hacked Apple iPhone X, Samsung Galaxy S9 and Xiaomi Mi 6 devices earning more than $225,000.

Hacking

Hacking Advertising Surveillance IoT

Black Hat 2018: IoT Security Issues Will Lead to Legal ‘Feeding Frenzy’

Threatpost

AUGUST 13, 2018

A "wave of litigation over IoT liability is on the horizon," according to an attorney who has represented plaintiffs in the 2015 Jeep hack.

IoT

IoT Hacking Cybersecurity

TheMoon bot infected 40,000 devices in January and February

Security Affairs

MARCH 26, 2024

A new variant of TheMoon malware infected thousands of outdated small office and home office (SOHO) routers and IoT devices worldwide. The Black Lotus Labs team at Lumen Technologies uncovered an updated version of “ TheMoon ” bot targeting end-of-life (EoL) small home/small office (SOHO) routers and IoT devices.

IoT

IoT Cybercrime Internet Internet

ARES ADB IOT Botnet targets Android Set Top Boxes (STB) and TVs

Security Affairs

AUGUST 31, 2019

Researchers from WootCloud Labs have uncovered a new IoT botnet named Ares that is targeting Android-based devices. Experts from WootCloud Labs have spotted a new IoT botnet tracked as Ares that is targeting Android-based devices that have a debug port exposed online. IoT #malware branches seen in ???????? (by by unique IP): 1.

IoT

IoT Passwords Advertising Malware

MY TAKE: Can Hollywood’s highly effective ‘source-code’ security tools help make IoT safe?

The Last Watchdog

SEPTEMBER 7, 2018

We met at Black Hat USA 2018 , where Hearn and O’Connor, came bearing a message about how these technologies, so heavily relied on by Hollywood, could play a starring role in shoring up the foundational layers of digital transformation — at the source code level. But now we have IoT devices connecting into these ecosystems.

IoT

IoT Technology Software Digital transformation

Established and emerging technologies to watch out for in 2018

Thales Cloud Protection & Licensing

DECEMBER 19, 2017

Cloud computing has gone mainstream for many enterprises, and the Internet of Things (IoT) is changing how both industrial and consumer-oriented companies do business. Looking to the new year however, which trends will come to define our industry in 2018 and beyond? Shift towards micro-services. Resurrection of established tech.

Technology

Technology Digital transformation IoT Encryption

2018 Top Cybersecurity Threats

NopSec

APRIL 23, 2018

This year, NopSec did just that with our 2018 Top Cybersecurity Threats White paper , and we predict that the biggest cyber threats will be massive data breaches, ransomware, opportunistic crypto-mining attacks and IoT hacking. Ransomware Ransomware dominated the news cycles in 2017 and we don’t expect that to change in 2018.

Cybersecurity

Cybersecurity IoT Cryptocurrency Data breaches

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT

IoT Hacking Internet Internet

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT

IoT Hacking Internet Internet

Guest Blog: Why it’s Critical to Orchestrate PKI Keys for IoT

Thales Cloud Protection & Licensing

NOVEMBER 14, 2018

According to statistica the number of Internet of Things (IoT) devices connected will rise to 23 billion this year. From industrial machinery and intelligent transportation to health monitoring and emergency notification systems, a broad range of IoT devices are already being deployed by enterprises.

IoT

IoT Authentication Manufacturing Digital transformation

Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled

Security Affairs

SEPTEMBER 26, 2018

The Hide and Seek (HNS) IoT botnet was first spotted early this year, since its discovery the authors continuously evolved its code. It is currently the first IoT malware that implements a persistence mechanism to keep devices infected after reboots. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

IoT

IoT Wireless Advertising Malware

2018 Thales Data Threat Report, Global Edition: Digital Transformation & Data Security

Thales Cloud Protection & Licensing

JANUARY 25, 2018

This morning we announced, in tandem with our partner 451 Research, the Global Edition of the 2018 Thales Data Threat Report. The post 2018 Thales Data Threat Report, Global Edition: Digital Transformation & Data Security appeared first on Data Security Blog | Thales e-Security. Digital transformation drives massive change.

Digital transformation

Digital transformation Threat Reports Big data Data breaches

Torii botnet, probably the most sophisticated IoT botnet of ever

Security Affairs

SEPTEMBER 29, 2018

Avast spotted a new IoT botnet, tracked as Torii, that appears much more sophisticated and stealth of the numerous Mirai variants previously analyzed. Security researchers spotted a new IoT botnet, tracked as Torii, that appears much more sophisticated and stealth of the numerous Mirai variants previously analyzed. Pierluigi Paganini.

IoT

IoT Architecture Advertising DDOS

Counting Down the Top 10 Most Popular SiteLock Blogs in 2018

SiteLock

AUGUST 27, 2021

There is a lot of information on the web on this subject and with 155 SiteLock blogs published in 2018 alone–that’s a lot content to search through! Join us as we countdown the top 10 most popular SiteLock blogs in 2018! Blog five in our top 10 most popular SiteLock blogs in 2018 has the answers. So how do you identify malware?

Malware

Malware IoT Cybersecurity Software

New IoT Security Regulations on Tap in U.S., U.K.

The Security Ledger

MAY 2, 2019

The post New IoT Security Regulations on Tap in U.S., Related Stories Report: Bad Bots sent One in Five Web Requests in 2018 Report: IoT Still Wildly Insecure as New ‘Credential Compromise’ Threat Emerges FBI: Cybercrime Accounted for $2.7B in Losses in 2018. Lawmakers in the U.S.

IoT

IoT Cybercrime Internet Internet

A new Zerobot variant spreads by exploiting Apache flaws

Security Affairs

DECEMBER 22, 2022

Microsoft Threat Intelligence Center (MSTIC) researchers discovered a new variant of the Zerobot botnet (aka ZeroStresser) that was improved with the capabilities to target more Internet of Things (IoT) devices. Adopt a comprehensive IoT security solution. The IT giant is tracking this cluster of threat activity as DEV-1061.

IoT

IoT DDOS Malware Firmware

10 Vendors Making News at Black Hat USA 2018

eSecurity Planet

AUGUST 9, 2018

New security products unveiled at the Black Hat USA 2018 conference include EDR, cloud security, IoT security, DevSecOps tools and more.

IoT

10 Lessons From an IoT Demo Lab

Dark Reading

MAY 7, 2018

The Demo Lab at InteropITX 2018 was all about IoT and the traffic - legitimate and malicious - it adds to an enterprise network.

IoT

Cloud Customers Faced 681M Cyberattacks in 2018

Dark Reading

JANUARY 24, 2019

The most common attacks involved software vulnerabilities, stolen credentials, Web applications, and IoT devices.

IoT

IoT Software

Microsoft ‘Bluekeep’ Flaw threatens Medical Devices, IoT

The Security Ledger

MAY 29, 2019

The post Microsoft ‘Bluekeep’ Flaw threatens Medical Devices, IoT appeared first on The Security Ledger. Related Stories Researchers Hack Aircraft Landing System with $600 Radios Report: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE!

IoT

IoT Internet Internet Hacking

ZoomEye IoT search engine cached login passwords for tens of thousands of Dahua DVRs

Security Affairs

JULY 16, 2018

A security researcher discovered that the IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs. The IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs, the discovery was made by security researcher Ankit Anubhav, Principal Researcher at NewSky Security.

IoT

IoT Engineering Passwords Firmware

MY TAKE: ‘Network Detection and Response’ emerges as an Internet of Things security stopgap

The Last Watchdog

APRIL 9, 2020

Related: The promise, pitfalls of IoT Companies have commenced the dispersal of IoT systems far and wide. Data collected by IoT devices will increasingly get ingested into cloud-centric networks where it will get crunched by virtual servers. And fantastic new IoT-enabled services will spew out of the other end.

Internet

Internet Internet IoT Technology

ThreatList: WordPress Vulnerabilities Tripled in 2018

Threatpost

JANUARY 9, 2019

Despite fewer plugins being added to Wordpress last year, the CMS saw an astounding tripling of vulnerabilities in its platform in 2018.

IoT

The UK Bans Default Passwords

STEPS FORWARD: Regulators are on the move to set much needed IoT security rules of the road

Webinars

Trending Sources

Evolution of threat landscape for IoT devices – H1 2018

Webinars

IoT Cybersecurity Bill Proposed to Congress

Measuring the Security of IoT Devices

Malvertising Campaign Targets IoT Devices: GeoEdge

The IoT Cybersecurity Act of 2020: Implications for Devices

Kaspersky honeypots find 105 million attacks on IoT devices in first half of 2019

Mozi Botnet is responsible for most of the IoT Traffic

BotenaGo botnet targets millions of IoT devices using 33 exploits

Here’s how anyone with $20 can hire an IoT botnet to blast out a week-long DDoS attack

Reading the ENISA Threat Landscape Report 2018

New DigiCert poll shows companies taking monetary hits due to IoT-related security missteps

5 IoT Security Predictions for 2019

ThreatList: Malware Samples Targeting IoT More Than Double in 2018

IoT and Machine Identity Management in Financial Services

FreeRTOS flaws expose millions of IoT devices to cyber attacks

Creator of multiple IoT botnets, including Satori, pleaded guilty

Sonicwall warns of a spike in the number of attacks involving encrypted malware and IoT malware

A look back on 2018: What was hype and what was, perhaps, underrated

Securing the future of IoT devices

Pwn2Own Tokyo 2018 – iPhone X exploits paid over $100,000

Black Hat 2018: IoT Security Issues Will Lead to Legal ‘Feeding Frenzy’

TheMoon bot infected 40,000 devices in January and February

ARES ADB IOT Botnet targets Android Set Top Boxes (STB) and TVs

MY TAKE: Can Hollywood’s highly effective ‘source-code’ security tools help make IoT safe?

Established and emerging technologies to watch out for in 2018

2018 Top Cybersecurity Threats

The Hacker Mind: Hacking IoT

The Hacker Mind: Hacking IoT

Guest Blog: Why it’s Critical to Orchestrate PKI Keys for IoT

Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled

2018 Thales Data Threat Report, Global Edition: Digital Transformation & Data Security

Torii botnet, probably the most sophisticated IoT botnet of ever

Counting Down the Top 10 Most Popular SiteLock Blogs in 2018

New IoT Security Regulations on Tap in U.S., U.K.

A new Zerobot variant spreads by exploiting Apache flaws

10 Vendors Making News at Black Hat USA 2018

10 Lessons From an IoT Demo Lab

Cloud Customers Faced 681M Cyberattacks in 2018

Microsoft ‘Bluekeep’ Flaw threatens Medical Devices, IoT

ZoomEye IoT search engine cached login passwords for tens of thousands of Dahua DVRs

MY TAKE: ‘Network Detection and Response’ emerges as an Internet of Things security stopgap

ThreatList: WordPress Vulnerabilities Tripled in 2018

Stay Connected