Centraleyes

DECEMBER 1, 2024

Your enterprise compliance tools should address the specific regulatory needs of your industry—whether it’s financial services, healthcare, manufacturing, or technology. HighBond by Diligent HighBond consolidates audit, compliance, risk, and security management into a single platform, with real-time data collection and reporting.

Risk

CSO Magazine

APRIL 18, 2023

An analysis of customer data collected by content delivery network and internet services giant Akamai found that attacks targeting web applications rose by 137% over the course of last year, as the healthcare and manufacturing sectors in particular were targeted with an array of API and application-based intrusions.

Manufacturing

Schneier on Security

AUGUST 14, 2024

Texas is suing General Motors for collecting driver data without consent and then selling it to insurance companies: From CNN : In car models from 2015 and later, the Detroit-based car manufacturer allegedly used technology to “collect, record, analyze, and transmit highly detailed driving data about each time a driver used their vehicle,” (..)

Insurance

Schneier on Security

SEPTEMBER 15, 2023

Where possible, favor openness and transparency over aggressive data collection or restrictions which erode civil liberties. Privacy Rights – Pervasive monitoring and data collection erode privacy rights and dignity. Security theater manufactures consent. Focus only on proportional responses.

Data collection

CyberSecurity Insiders

AUGUST 20, 2021

According to a media update released by the Cyberspace Administration of China (CAC) the new law called the Personal Information Protection Law(PIPL) will come into force from October 26th,2021 and will aim to standardize solutions pertaining to data security risks in automobile sector.

Manufacturing

Security Boulevard

MAY 2, 2024

Chris Clements, VP of Solutions Architecture at CISO Global “Hey Alexa, are you stealing my company’s data?” In an age where manufacturers have decided that just about every device needs to be “smart,” it’s becoming difficult to avoid the data collection and privacy invasion that are often baked into these devices.

Surveillance

Thales Cloud Protection & Licensing

SEPTEMBER 10, 2024

B2B IAM in Agricultural Machinery: Building a Seamless and Secure Future for Manufacturers madhav Tue, 09/10/2024 - 07:01 As global food demand continues to rise, agricultural machinery manufacturers face growing pressure to modernise and adopt sustainable practices.

B2B

Schneier on Security

SEPTEMBER 26, 2019

While it's unlikely that China would bother spying on commuters using subway cars, it would be much less surprising if a tech company offered free Internet on subways in exchange for surveillance and data collection. Our enemies do it.

Surveillance

Malwarebytes

AUGUST 20, 2024

Texas Attorney General Ken Paxton has sued General Motors (GM) for the unlawful collection and sale of over 1.5 million Texans’ private driving data to insurance companies without their knowledge or consent. The driving data collected and sold by GM included trip details like speed, seatbelt status, and driven distance.

Insurance

Security Affairs

DECEMBER 12, 2023

The experts observed the use of NineRAT at around September 2023 against a European manufacturing entity. Talos believes that NineRAT was built around May 2022, but was first spotted on March 2023 as part of Operation Blacksmith. In March, the threat actors hit a South American agricultural organization.

Malware

SecureWorld News

NOVEMBER 15, 2023

The automakers argued that their practice was necessary to provide certain features and services, such as hands-free calling and texting, and that customers had consented to the data collection by agreeing to the terms of service when they purchased their vehicles. For the auto manufacturers involved, this is a significant victory.

Data collection

Malwarebytes

JULY 29, 2024

At Malwarebytes, we reported how a team of researchers at Mozilla who reviewed the privacy and data collection policies of various product categories for several years now, named “Privacy Not Included,” found cars to be the worst product category they ever reviewed for privacy.

Insurance

The Last Watchdog

DECEMBER 6, 2018

And, in doing so, the IC has developed an effective set of data handling and cybersecurity best practices. Businesses at large would do well to model their data collection and security processes after what the IC refers to as the “intelligence cycle.” Related video: Using the NIST framework as a starting point.

Financial Services

Threatpost

MARCH 20, 2020

The coronavirus pandemic is creating a lucrative market for facial recognition manufacturers. But privacy issues need to be top of mind, tech experts warn.

Manufacturing

Troy Hunt

NOVEMBER 25, 2020

Back to the bit about risks impacting data collected by IoT devices and back again to CloudPets, Context Security's piece aligned with my own story about kids' CloudPets messages being left exposed to the internet. Here we had a situation where an attacker could easily control moving parts within a car from a remote location.

IoT

Thales Cloud Protection & Licensing

FEBRUARY 16, 2021

There are three major threat vectors that harm IoT deployments: Devices are hijacked by malicious software; Data collected and processed in IoT ecosystems is tampered with and impacts the confidentiality, integrity and availability of the information; and, Weak user and device authentication. However, the security mindset is changing.

IoT

Malwarebytes

JANUARY 9, 2023

Sounding horns, disabling start up, reporting a vehicle as stolen, even accessing built in cameras are all possible for rogue entities should they manage to break into a manufacturer’s network. What access, data, and control was made available to researchers. Are these issues still a problem?

Manufacturing

The Last Watchdog

MARCH 8, 2021

“The second reason for this healthy public debate is that thought leaders in technology are in the best position to implement tools for respecting consumer privacy, such as providing full disclosure about data collection and requiring consent for collection of sensitive personal data. McConomy: Facebook, Instagram, etc.,

Data privacy

Security Affairs

OCTOBER 27, 2022

Data collected by Microsoft Defender for Endpoint shows that nearly 3,000 devices in almost 1,000 organizations have seen at least one RaspberryRobin payload-related alert in the last 30 days. DEV-0950 group used Clop ransomware to encrypt the network of organizations previously infected with the Raspberry Robin worm.

Ransomware

Security Affairs

FEBRUARY 12, 2023

An internal audit of surveillance equipment in Australian government and agency offices revealed the presence of more than 900 built systems manufactured by Chinese companies Hikvision and Dahua. The decision of the Australian government is aligned with similar decisions taken by the US and UK governments.

Surveillance

Malwarebytes

MAY 13, 2024

Modern cars are the latest consumer “device” to undergo an internet-crazed overhaul, as manufacturers increasingly stuff their automobiles with the types of features you’d expect from a smartphone, not a mode of transportation. No, we’re not talking about stalkerware. Or hidden Apple AirTags. We’re talking about cars.

Manufacturing

Security Affairs

NOVEMBER 5, 2018

Experts from Honeywell analyzed data collected with the Secure Media Exchange (SMX) , a product it has launched in 2017 and that was designed to protect industrial facilities from USB-borne threats.

Malware

Security Affairs

FEBRUARY 3, 2022

A China-linked APT group tracked as Antlion is using a custom backdoor called xPack in attacks aimed at financial organizations and manufacturing companies, Symantec researchers reported. ” xPack allowed threat actors to run WMI commands remotely and mount shares over SMB to transfer data from C2 servers to them.

Manufacturing

Security Affairs

AUGUST 10, 2019

Data collected by the malware include manufacturer and model, OS version, country of residence of the user, the default language of the system, user agent identifier, name of mobile operator, type of internet connection, screen options, time zone, and information about the tainted application containing the Trojan.

Mobile

CyberSecurity Insiders

JANUARY 29, 2021

Consumer Reports(CR) Digital Lab Initiative has tested such devices and has offered its consumers a report on how well are the companies manufacturing such devices are dealing with their user privacy. But is urging the OEM to bring transparency on how it protects the data collected from its users of its connected devices.

Data privacy

Krebs on Security

OCTOBER 12, 2018

TS: Yes, you can put something into everything, but all of a sudden you have this massive big data collection problem on the back end where you as the attacker have created a different kind of analysis problem. Of course, some nations have more capability than others to sift through huge amounts of data they’re collecting.

Computers and Electronics

Malwarebytes

JUNE 6, 2023

Microsoft is counting the cost of privacy violations, with $20m in fines related to illegal data collection from children’s Xbox accounts. The Xbox manufacturer has reached a settlement with the Federal Trade Commision (FTC), a result which promises to have other console developers looking closely at their privacy policies.

Accountability

SecureWorld News

AUGUST 23, 2024

Critical infrastructure providers and manufacturing companies are increasingly pursuing IT and OT convergence, as the data collection and analysis benefits can dramatically improve production efficiency, maintenance, and scaling," said Marcus Fowler, CEO of Darktrace Federal. VJ Viswanathan will co-present with Col.

Cyber Attacks

CyberSecurity Insiders

SEPTEMBER 21, 2021

For example, the recent ransomware that leverages IT/OT convergence including the manufacturing and energy industries has prompted CISA to issue guidance regarding ransomware impacting OT environments ( read the guidance and how Tenable can help). • Configuration control that tracks all changes to code, OS & firmware regardless.

Energy and Utilities

The Last Watchdog

SEPTEMBER 20, 2019

The personal data collected by the criminal botnets is the source of baseline intelligence that ideologues and propagandists continue to use to target and refine their disinformation campaigns, which they typically disperse by social media.

Ransomware

Thales Cloud Protection & Licensing

DECEMBER 13, 2018

With consumers in particular prioritising convenience and functionality over security, it’s down to manufacturers to ensure security is embedded into devices from the point of creation. Authentic, secure patching ensures that manufacturers can mitigate security issues before cyber criminals can act.

Internet

Security Affairs

NOVEMBER 16, 2018

The threats that are notable for the Asian region are represented by a significant number of attacks aimed at manufacturing of chips, microprocessors and system control boards of different IT vendors, whose principal manufacturing operations are located in Asia.

Cybercrime

SecureWorld News

APRIL 3, 2023

The data collected from various sources is then analyzed using various tools. Main features of SDL There are five key features that SDL should have: The key component of SDL is the automation of data collection and parsing. Viewing this data manually is unrealistic. Automation of adding context for security logs.

Unstructured Data

eSecurity Planet

SEPTEMBER 9, 2024

Industrial control systems (ICS) are the backbone of critical infrastructure, powering essential operations in the energy, manufacturing, water treatment, and transportation sectors. These systems are integral to the smooth operation of industries such as manufacturing, power generation, oil and gas, water management, and more.

Firmware

Malwarebytes

DECEMBER 6, 2022

There are many ways that data collection, and data availability, make less sense as the years pass by. The individual sections of the 17 digit number detail all manner of information about the car, ranging from manufacturer to attributes. What say you, car manufacturers?

Manufacturing

Malwarebytes

MARCH 3, 2021

Detailed credentials for more than 21 million mobile VPN app users were swiped and advertised for sale online last week, offered by a cyber thief who allegedly stole user data collected by the VPN apps themselves.

VPN

SecureWorld News

SEPTEMBER 15, 2021

These devices interweave with each other, creating an essential fabric in our data collection methods, manufacturing operations, and much more. But what about securing this technology and the data flow coming from an army of Internet of Things environments? Securing your IoT environment.

IoT