Thales Cloud Protection & Licensing

FEBRUARY 16, 2021

There are three major threat vectors that harm IoT deployments: Devices are hijacked by malicious software; Data collected and processed in IoT ecosystems is tampered with and impacts the confidentiality, integrity and availability of the information; and, Weak user and device authentication. However, the security mindset is changing.

IoT 96

IoT Manufacturing Energy and Utilities Data collection 96

Security Affairs

FEBRUARY 12, 2023

An internal audit of surveillance equipment in Australian government and agency offices revealed the presence of more than 900 built systems manufactured by Chinese companies Hikvision and Dahua. The decision of the Australian government is aligned with similar decisions taken by the US and UK governments.

Surveillance 87

Surveillance Government Manufacturing Risk 87

Threatpost

MARCH 20, 2020

The coronavirus pandemic is creating a lucrative market for facial recognition manufacturers. But privacy issues need to be top of mind, tech experts warn.

Manufacturing 113

Manufacturing Marketing Data collection Surveillance 113

Security Affairs

FEBRUARY 3, 2022

A China-linked APT group tracked as Antlion is using a custom backdoor called xPack in attacks aimed at financial organizations and manufacturing companies, Symantec researchers reported. ” xPack allowed threat actors to run WMI commands remotely and mount shares over SMB to transfer data from C2 servers to them.

Manufacturing 89

Manufacturing Malware Data collection Encryption 89

The Last Watchdog

DECEMBER 6, 2018

And, in doing so, the IC has developed an effective set of data handling and cybersecurity best practices. Businesses at large would do well to model their data collection and security processes after what the IC refers to as the “intelligence cycle.” Related video: Using the NIST framework as a starting point.

Financial Services 149

Financial Services Data collection Manufacturing Cyber Attacks 149

CyberSecurity Insiders

JANUARY 29, 2021

Consumer Reports(CR) Digital Lab Initiative has tested such devices and has offered its consumers a report on how well are the companies manufacturing such devices are dealing with their user privacy. But is urging the OEM to bring transparency on how it protects the data collected from its users of its connected devices.

Data privacy 85

Data privacy Data collection Passwords Manufacturing 85

Malwarebytes

JUNE 6, 2023

Microsoft is counting the cost of privacy violations, with $20m in fines related to illegal data collection from children’s Xbox accounts. The Xbox manufacturer has reached a settlement with the Federal Trade Commision (FTC), a result which promises to have other console developers looking closely at their privacy policies.

Accountability 79

Accountability Advertising Data collection Manufacturing 79

Security Affairs

OCTOBER 27, 2022

Data collected by Microsoft Defender for Endpoint shows that nearly 3,000 devices in almost 1,000 organizations have seen at least one RaspberryRobin payload-related alert in the last 30 days. DEV-0950 group used Clop ransomware to encrypt the network of organizations previously infected with the Raspberry Robin worm.

Ransomware 97

Ransomware Malware Data collection Encryption 97

Schneier on Security

SEPTEMBER 26, 2019

While it's unlikely that China would bother spying on commuters using subway cars, it would be much less surprising if a tech company offered free Internet on subways in exchange for surveillance and data collection. Our enemies do it.

Surveillance 218

Surveillance Wireless Government Internet 218

Thales Cloud Protection & Licensing

DECEMBER 13, 2018

With consumers in particular prioritising convenience and functionality over security, it’s down to manufacturers to ensure security is embedded into devices from the point of creation. Authentic, secure patching ensures that manufacturers can mitigate security issues before cyber criminals can act.

Internet 66

Internet Internet IoT Manufacturing 66

Malwarebytes

DECEMBER 6, 2022

There are many ways that data collection, and data availability, make less sense as the years pass by. The individual sections of the 17 digit number detail all manner of information about the car, ranging from manufacturer to attributes. What say you, car manufacturers?

Manufacturing 92

Manufacturing Wireless Risk Data collection 92

The Last Watchdog

MARCH 8, 2021

“The second reason for this healthy public debate is that thought leaders in technology are in the best position to implement tools for respecting consumer privacy, such as providing full disclosure about data collection and requiring consent for collection of sensitive personal data. McConomy: Facebook, Instagram, etc.,

Data privacy 196

Data privacy Manufacturing Education Technology 196

Centraleyes

FEBRUARY 19, 2024

Shortcomings in Traditional Risk Management: Silos Example: A manufacturing company focuses on department-specific risks, such as production delays, without assessing how these issues might affect overall supply chain efficiency or customer satisfaction. Automate data collection processes to reduce reliance on manual intervention.

Risk 52

Risk Marketing Manufacturing Data collection 52

Security Affairs

NOVEMBER 5, 2018

Experts from Honeywell analyzed data collected with the Secure Media Exchange (SMX) , a product it has launched in 2017 and that was designed to protect industrial facilities from USB-borne threats.

Malware 91

Malware IoT Advertising Data collection 91

Security Affairs

AUGUST 10, 2019

Data collected by the malware include manufacturer and model, OS version, country of residence of the user, the default language of the system, user agent identifier, name of mobile operator, type of internet connection, screen options, time zone, and information about the tainted application containing the Trojan.

Mobile 93

Mobile Advertising Malware Data collection 93

SecureWorld News

JANUARY 8, 2024

Implicit consent issues: The mere presence of an AI assistant-enabled device may imply consent to data collection, which can be problematic for users who are not fully aware of the extent of data gathering and processing. Supply chain attacks: Since the hardware button is a physical component, its supply chain could be targeted.

Artificial Intelligence 77

Artificial Intelligence Surveillance Technology Risk 77

CyberSecurity Insiders

MAY 14, 2021

For IoT connected medical devices, for example, it is essential that healthcare providers ensure the manufacturer they choose has designed digital security into the device from the ground up and at all points in the ecosystem to prevent vulnerabilities at the weakest point jeopardising the security of the whole device.

Healthcare 91

Healthcare IoT Technology Data collection 91

SiteLock

AUGUST 27, 2021

One of the biggest concerns I hear and share is that the manufacturer may suddenly discontinue development of updates. How long will it be before the manufacturer decides that you’ll need to buy the new version in order to continue getting updates? The problem with many consumer electronics is their planned obsolescence.

Internet 52

Internet Internet IoT Computers and Electronics 52

Troy Hunt

NOVEMBER 25, 2020

Back to the bit about risks impacting data collected by IoT devices and back again to CloudPets, Context Security's piece aligned with my own story about kids' CloudPets messages being left exposed to the internet. Here we had a situation where an attacker could easily control moving parts within a car from a remote location.

IoT 358

IoT Firmware Risk Manufacturing 358

Security Boulevard

JUNE 24, 2023

Of the Android phones that don't, they may come with another manufacturer browser that proves non-privacy friendly and/or has questionable security. Engage in limited telemetry or data collection Browsers should not phone home any browsing related activity. Most Android phones come from the factory with Google Chrome installed.

Hacking 59

Hacking Data collection Manufacturing Engineering 59

SecureWorld News

SEPTEMBER 15, 2021

These devices interweave with each other, creating an essential fabric in our data collection methods, manufacturing operations, and much more. But what about securing this technology and the data flow coming from an army of Internet of Things environments? Securing your IoT environment.

IoT 77

IoT Encryption Internet Internet 77

Security Affairs

NOVEMBER 16, 2018

The threats that are notable for the Asian region are represented by a significant number of attacks aimed at manufacturing of chips, microprocessors and system control boards of different IT vendors, whose principal manufacturing operations are located in Asia.

Cybercrime 83

Cybercrime Hacking Banking Phishing 83

Security Boulevard

JANUARY 18, 2024

In another example, consider a manufacturing company that mandates an API standard that requires that all external facing APIs that deliver CAD design documents be over an encrypted channel, authenticated via JWT, and must always be served by a particular API gateway, behind a particular CDN.

Risk 59

Risk Government Artificial Intelligence Threat Detection 59

CyberSecurity Insiders

SEPTEMBER 29, 2021

Section 40121: Enhancing Grid Security through Public-Private Partnership – The Secretary (Energy), in consultation with the Secretary of Homeland Security and the heads of other relevant Federal agencies, State regulatory authorities, industry stakeholders, and the Electric Reliability Organization, shall carry out a program— (A) to develop, (..)

Energy and Utilities 108

Energy and Utilities Cybersecurity Technology Architecture 108

SecureWorld News

JUNE 14, 2022

IoT devices are always collecting data. Most IoT device users realize IoT devices collect and derive massive amounts of data. But the amount, and types, of data collected are much greater than what most realize; how can they know without training? Many third parties access, use, and share IoT data.

IoT 70

IoT Healthcare Risk Firmware 70

Krebs on Security

OCTOBER 12, 2018

TS: Yes, you can put something into everything, but all of a sudden you have this massive big data collection problem on the back end where you as the attacker have created a different kind of analysis problem. Of course, some nations have more capability than others to sift through huge amounts of data they’re collecting.

Computers and Electronics 206

Computers and Electronics Internet Internet Technology 206

Malwarebytes

JANUARY 9, 2023

Sounding horns, disabling start up, reporting a vehicle as stolen, even accessing built in cameras are all possible for rogue entities should they manage to break into a manufacturer’s network. What access, data, and control was made available to researchers. Are these issues still a problem?

Manufacturing 69

Manufacturing Data collection Social Engineering Engineering 69

Malwarebytes

SEPTEMBER 25, 2023

A team of researchers at Mozilla which has reviewed the privacy and data collection policies of various product categories for several years now, named "Privacy Not Included," recently turned their attention to modern-day vehicles, and what they found shocked them. But here's a surprise answer with just as much validity: Cars.

Manufacturing 134

Manufacturing Data collection Advertising Media 134

SecureWorld News

APRIL 3, 2023

The data collected from various sources is then analyzed using various tools. Main features of SDL There are five key features that SDL should have: The key component of SDL is the automation of data collection and parsing. Viewing this data manually is unrealistic. Automation of adding context for security logs.

Unstructured Data 86

Unstructured Data Data collection Information Security Backups 86

eSecurity Planet

JULY 22, 2021

The attacks targeted 553 different types of devices from 212 manufacturers, ranging from digital signage and smart TVs to set-top boxes, IP cameras, and automotive multimedia systems. Zscaler’s ThreatLabz research team also saw such devices as smart refrigerators and musical furniture connected to the cloud and open to attack.

IoT 143

IoT Risk Architecture Manufacturing 143

CyberSecurity Insiders

SEPTEMBER 21, 2021

For example, the recent ransomware that leverages IT/OT convergence including the manufacturing and energy industries has prompted CISA to issue guidance regarding ransomware impacting OT environments ( read the guidance and how Tenable can help). • Configuration control that tracks all changes to code, OS & firmware regardless.

Energy and Utilities 101

Energy and Utilities Threat Detection Manufacturing Technology 101

Thales Cloud Protection & Licensing

JANUARY 4, 2023

Data sovereignty hits the road. The concept of "data sovereignty" refers to both the legality of data collection and storage in accordance with local laws. Data is always in motion due to the global nature of most businesses, whose customers and partners may be situated anywhere in the world.

Cybersecurity 87

Cybersecurity Risk Ransomware Marketing 87

Malwarebytes

MARCH 3, 2021

Detailed credentials for more than 21 million mobile VPN app users were swiped and advertised for sale online last week, offered by a cyber thief who allegedly stole user data collected by the VPN apps themselves.

VPN 145

VPN Passwords Internet Internet 145

The Last Watchdog

SEPTEMBER 20, 2019

The personal data collected by the criminal botnets is the source of baseline intelligence that ideologues and propagandists continue to use to target and refine their disinformation campaigns, which they typically disperse by social media.

Ransomware 153

Ransomware Government Firewall Cyber Insurance 153

CyberSecurity Insiders

JUNE 29, 2021

This means that there were no faults in the system of the manufacturer. It’s powered by AI which analyses the data collected by the biometric scanner and verifies if the source is coming from a live or fake representation. Where does liveness detection fit in this scenario?

Marketing 114

Marketing Technology Data collection Authentication 114

Security Boulevard

MARCH 31, 2022

Data collection from FTP clients, IM clients. Seen in attacks against healthcare and manufacturing agencies, RedLine started with heavy-hitter industries and only got worse as more users purchased it. Autocomplete fields. Credit cards. Supported browsers: All browsers based on Chromium (even latest version of Chrome).

Cybersecurity 98

Cybersecurity Social Engineering Passwords Malware 98

Thales Cloud Protection & Licensing

JANUARY 18, 2022

Integrating usage data into a billing solution enables an end-to-end offering covering the complete sequence from data collection to invoice production. While no one argues about the potential benefits of usage data, we found that putting usage information to practical use is a challenge for many.

Software 93

Software Digital transformation Mobile Data collection 93