CyberSecurity Insiders

SEPTEMBER 8, 2021

I work at a Fortune 100 Media and Entertainment company operating within the Information Security Architecture and Engineering group on the Cloud Security Services team. I also work with my team on leading risk assessments, authoring position papers, security architecture evaluations, and associated risk discovery activities.

Computers and Electronics 52

Computers and Electronics Architecture Education Cybersecurity 52

SecureList

JUNE 20, 2023

These vulnerabilities could allow an attacker to gain unauthorized access to the device and steal sensitive information, such as video footage, potentially turning the feeder into a surveillance tool. A hard-coded root password is a significant security issue because all devices of the same model share the same root password.

Firmware 95

Firmware Passwords Manufacturing Mobile 95

eSecurity Planet

APRIL 9, 2024

Security infrastructure and redundancy: Check the vendor’s data centers, network architecture, backup and disaster recovery plans, and uptime assurances. Assess the physical security measures: Evaluate access controls, surveillance systems, and environmental controls. Teach them how to verify the sender’s address and URL.

Risk 108

Risk Threat Detection Data breaches Encryption 108

eSecurity Planet

DECEMBER 19, 2023

Ricardo Villadiego, founder & CEO of Lumu , expects “a significant shift towards adopting models based on passwordless architectures like Google Passkeys as the dominant authentication method to combat phishing and scam campaigns. Joe Payne, President & CEO at Code42 expects biometrics to trigger a shift to insider threats. “As

Cybersecurity 140

Cybersecurity CISO Government Technology 140

SecureList

MAY 31, 2021

The Apple M1, a direct relative of the processors used in the iPhone and iPad, will ultimately allow Apple to unify its software under a single architecture. Just a few months after the release of the first Apple M1 computers, malware writers had already recompiled their code to adapt it to the new architecture.

Malware 109

Malware Adware Encryption Architecture 109

ForAllSecure

APRIL 22, 2021

It's like using a hash of your street address, as the password for your front door. The Mirai botnet contributed to a massive denial of service attack that brought parts of the Internet to a standstill, what was remarkable was that Mariah was constructed from 1000s of Internet of Things devices, namely surveillance cameras.

IoT 52

IoT Hacking Internet Internet 52

ForAllSecure

APRIL 22, 2021

It's like using a hash of your street address, as the password for your front door. The Mirai botnet contributed to a massive denial of service attack that brought parts of the Internet to a standstill, what was remarkable was that Mariah was constructed from 1000s of Internet of Things devices, namely surveillance cameras.

IoT 52

IoT Hacking Internet Internet 52

SecureList

APRIL 27, 2022

While we were unable to obtain the same results by analyzing the CERT-UA samples, we subsequently identified a different WhiteBlackCrypt sample matching the WhisperKill architecture and sharing similar code. On February 23, ESET published a tweet announcing new wiper malware targeting Ukraine.

Malware 137

Malware Firmware Government Phishing 137

SecureList

OCTOBER 17, 2023

This strategic shift signals its intent to intensify its surveillance capabilities and expand its range of targets. In its most recent wave of attacks, BlindEagle has once again adapted, embracing yet another open-source RAT, Agent Tesla. The initial attack vector was a phishing email disguised as an email from a government entity or service.

Government 117

Government Malware VPN Manufacturing 117

ForAllSecure

MAY 2, 2023

You had to figure out how to configure Kermit, get passwords to get on. Hacker was more about the pursuit of knowledge. And that pursuit of knowledge because it was harder to find things that weren't search engines. To the local facts and you had to, you know, find the guy who was a sysadmin who maybe you could, you know, get all the manuals.

Hacking 40

Hacking Media InfoSec Internet 40

ForAllSecure

OCTOBER 5, 2021

It was for 1000s of compromised, Internet of Things, enabled devices, such as surveillance cameras, residential gateways, internet connected printers, and even in home baby monitors these devices themselves are often thought of as not having much in the way of resources, and really they don't have many computing resources.

IoT 52

IoT DDOS Malware Internet 52