Troy Hunt

NOVEMBER 25, 2020

Problem is though, connected lights can create a bit of a conundrum here: I was looking at doing exactly this with my downlights, but the idea of the wall switch annoyed me - if it's off, I can't then voice turn on the lights. Important side note: do check that stuff like this is approved for your part of the world.

IoT 342

IoT Firmware Media Marketing 342

CyberSecurity Insiders

JUNE 18, 2021

In this case, connected devices need to know that the technology they are connected to is what it claims to be. Digital identities are needed to bridge that gap and ensure people and machines can trust other organisations, businesses, and devices, and vice-versa. So, what forms does digital identity take?

Mobile 98

Mobile IoT Digital transformation Banking 98

Security Affairs

APRIL 22, 2022

This shift to digital technology has created a new class of digital risks that are constantly evolving and strike faster and often with more severity than traditional risks. If the technology were to become unavailable, the resulting business impact could be mitigated with cyber insurance. Ransom demands continue to increase.

Cyber Insurance 81

Cyber Insurance Insurance Risk Technology 81

DoublePulsar

DECEMBER 3, 2023

Ongoing Operations’ two Netscaler devices remain offline. Back in October, I wrote a Mastodon toot saying CitrixBleed would have more legs than people realise: [link] The reason I wrote this toot is as follows: in a world where there are thousands of new security vulnerabilities every few months, not all vulnerabilities are equal.

Ransomware 100

Ransomware Cybersecurity Healthcare Government 100

Notice Bored

OCTOBER 19, 2021

before returning to read the remainder of this blog. Any spelling mistakes, grammatical errors or layout problems? If not, hopefully this blog series has given you food for thought! Is your backup policy exclusively about backing up computer data , most likely digital data from corporate IT systems? What's the purpose?

Backups 56

Backups Risk Internet Internet 56

ForAllSecure

OCTOBER 2, 2019

Tell me if you’ve heard this: there is a new advanced network intrusion device that uses modern, super-smart Machine Learning (ML) to root out known and unknown intrusions. The IDS device is so smart, it learns what’s normal on your network and does not immediately inform you when it sees an anomaly.

Malware 52

Malware Engineering Passwords Internet 52

ForAllSecure

OCTOBER 2, 2019

Tell me if you’ve heard this: there is a new advanced network intrusion device that uses modern, super-smart Machine Learning (ML) to root out known and unknown intrusions. The IDS device is so smart, it learns what’s normal on your network and does not immediately inform you when it sees an anomaly.

Malware 40

Malware Engineering Passwords Internet 40

ForAllSecure

OCTOBER 2, 2019

Tell me if you’ve heard this: there is a new advanced network intrusion device that uses modern, super-smart Machine Learning (ML) to root out known and unknown intrusions. The IDS device is so smart, it learns what’s normal on your network and does not immediately inform you when it sees an anomaly.

Malware 40

Malware Engineering Passwords Internet 40

ForAllSecure

SEPTEMBER 10, 2019

Any device, including TVs from 2010, that runs this code can be remotely crashed with an out of bounds read that can be used in conjunction with other bugs to get a pretty serious situation. Imagine if someone has this code running on a connected smart TV—all devices could be in trouble. mongoose.h. Harnessing.

Software 52

Software Engineering Technology 52

ForAllSecure

SEPTEMBER 9, 2019

Any device, including TVs from 2010, that runs this code can be remotely crashed with an out of bounds read that can be used in conjunction with other bugs to get a pretty serious situation. Imagine if someone has this code running on a connected smart TV—all devices could be in trouble. mongoose.h. Harnessing.

Software 40

Software Engineering 40

ForAllSecure

SEPTEMBER 9, 2019

Any device, including TVs from 2010, that runs this code can be remotely crashed with an out of bounds read that can be used in conjunction with other bugs to get a pretty serious situation. Imagine if someone has this code running on a connected smart TV—all devices could be in trouble. mongoose.h. Harnessing.

Software 40

Software Engineering 40

Troy Hunt

NOVEMBER 22, 2020

I had to buy new gear, learn new acronyms and work with things I'd never heard of before. I added to this blog post as I progressed with a view to ultimately having a "happy path" for others to follow in the future. Everybody Wants to be "The IoT Solution" This is where the whole mess starts: what is the hub of your IoT world?

IoT 362

IoT Firmware Manufacturing Internet 362

SecureList

JUNE 20, 2023

Introduction In today’s interconnected world, more and more devices are being connected to the internet, including everyday household items like pet feeders that are becoming smart by virtue of this simple fact. However, as these devices become more sophisticated, they also become more vulnerable to cyberattacks.

Firmware 87

Firmware Passwords Manufacturing Mobile 87

ForAllSecure

JUNE 2, 2021

He also gives a preview of his new YouTube series on the sudo vulnerability. Once you were in, you could ask questions, you could learn new skills, and you could find out about even more BBSs. On these BBSs no one would know your true identity or age; you’d only be judged by what you wrote.

Media 52

Media Hacking InfoSec Marketing 52

ForAllSecure

JUNE 2, 2021

He also gives a preview of his new YouTube series on the sudo vulnerability. Once you were in, you could ask questions, you could learn new skills, and you could find out about even more BBSs. On these BBSs no one would know your true identity or age; you’d only be judged by what you wrote.

Media 52

Media Hacking InfoSec Marketing 52

McAfee

AUGUST 24, 2021

Together, these vulnerabilities could be used by a malicious actor to modify a pump’s configuration while the pump is in standby mode, resulting in an unexpected dose of medication being delivered to a patient on its next use – all with zero authentication. For a brief overview please see our summary blog here. Table of Contents.

Computers and Electronics 145

Computers and Electronics Authentication Software Risk 145

Thales Cloud Protection & Licensing

JULY 24, 2018

These statistics indicate data breaches remain pervasive within the federal government, and that the current methods being used to secure agency data are not working as effectively as they could. Many people still think data security (especially encryption) is complex and has a performance problem. But, that’s not the whole story.

Encryption 48

Encryption Data breaches Government Threat Reports 48

ForAllSecure

MAY 13, 2022

After hearing a talk, a Dallas-based hacker set out to find out what was going on inside the smart meter attached to his home, and what he found was surprising. This included the rapid adoption of smart meters. We need to install Smart Meters now to make this happen. Environmental effects caused by pollution.

Engineering 52

Engineering Energy and Utilities Computers and Electronics Firmware 52

ForAllSecure

FEBRUARY 22, 2023

What if you could see their screens and have interviews with the players in the moment? Last year at Hacker Summer Camp I was invited to Mikko Hypponen’s book launch for If it’s Smart, It’s vulnerable. They invited the top cyber reasoning systems, machines that could think like a hacker, to Las Vegas for the finals.

Engineering 40

Engineering Hacking Wireless Marketing 40

Security Boulevard

JUNE 1, 2021

A roundup of UK focused Cyber and Information Security News, Blog Posts, Reports and general Threat Intelligence from the previous calendar month, May 2021. The UK National Cyber Security Centre (NCSC) published its Smart Cities (connected places) guidance for UK local authorities. Is your Home Router a Security Risk?

Ransomware 105

Ransomware Passwords Scams Cyber Attacks 105

Troy Hunt

SEPTEMBER 17, 2018

The problem is, people simply aren't conditioned to expect to see the company name and there's very simple, effective demonstration of why this is the case: Watching with amusement as @CertCouncil (backed by commercial CAs) pushes for pricey EV certs. Does anyone else have a contact they can leverage to get clarity?

Marketing 275

Marketing Encryption Phishing Banking 275

Troy Hunt

FEBRUARY 16, 2022

My views on certificate authority shenanigans spinning yarns on EV are well known after having done many talks on the topic and written many blog posts, most recently in August 2019 after both Chrome and Firefox announced they were killing it. Your significant other? Your parents? Yeah, nah. Let's tear it apart bit by bit.

Banking 337

Banking Mobile Phishing Advertising 337

Thales Cloud Protection & Licensing

JANUARY 7, 2021

Selecting the Right Cloud SSO Solution for Your Organization. This blog will introduce access management evaluation criteria guidelines and discuss what features you should look for and what vendors to consider for your next employee access management solution. IT and risk professionals are looking for new ways to secure access.

Authentication 62

Authentication VPN Passwords Risk 62

Troy Hunt

APRIL 15, 2019

Do you ever hear those stories from your parents along the lines of "when I was young." For example, there was VTech back in 2015 who leaked millions of kids' info after they registered with "smart" tablets. And then there's kids' smart watches themselves. The solution? mSpy leaked data. mSpy leaked data. SpyFone leaked data.

Spyware 279

Spyware Passwords Manufacturing Marketing 279

Thales Cloud Protection & Licensing

NOVEMBER 7, 2017

As both the public and private sector embrace digital transformation and face an increasingly sophisticated threat scape, presidential executive orders have sought to remedy that problem. The proliferation of connected devices offers enormous business benefit, across industries as diverse as manufacturing, healthcare and automotive.

IoT 97

IoT Cybersecurity Digital transformation Manufacturing 97

ForAllSecure

FEBRUARY 10, 2021

How do the current DMCA laws impact those who hack digital devices? And why doesn’t our basic right to repair our devices extend into the digital world? In normal times I’d call a repair person, then wait until he or she could show up and fix my appliance. So my dishwasher wasn’t draining.

InfoSec 52

InfoSec Manufacturing Technology Software 52

ForAllSecure

FEBRUARY 10, 2021

How do the current DMCA laws impact those who hack digital devices? And why doesn’t our basic right to repair our devices extend into the digital world? In normal times I’d call a repair person, then wait until he or she could show up and fix my appliance. So my dishwasher wasn’t draining.

InfoSec 52

InfoSec Manufacturing Technology Software 52