Security Boulevard

FEBRUARY 14, 2025

Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) called buffer overflow vulnerabilities unforgivable defects that put national and economic security at risk. Buffer overflows happen when data written to a computers memory buffer exceeds the buffers capacity.

Banking

Security Boulevard

JULY 18, 2025

All Your UAVs Are Belong to UKR: Ukrainian Cyber Alliance and Black Owl team up to hack manufacturer of Russian military drones, sources say. The post Ukraine Pwns Russian Drone Maker — Gaskar is ‘Paralyzed’ appeared first on Security Boulevard.

Manufacturing

Centraleyes

MARCH 24, 2025

The act applies to both manufacturers and suppliers of software and hardware products sold within the EU. It establishes common cybersecurity rules for manufacturers and developers of products with digital elements, and it covers both hardware and software. What Risks Does the CRA Address?

Manufacturing

Jane Frankland

JANUARY 12, 2025

In this blog, I’m exploring these changes, grouped under key categories that I’ve used in previous years, to help business leaders and cyber risk owners better prepare for the evolving landscape. Critical infrastructure face heightened risk from targeted disruptions, as do small businesses who are the backbone of the economy.

Cybersecurity

Centraleyes

DECEMBER 1, 2024

The Shift Toward Revenue-Positive Compliance A 2023 study by Todd Haugh and Suneal Bedi from Indiana University’s Kelley School of Business offers groundbreaking insights into how compliance can create positive value beyond traditional risk management. Ensure Multi-Industry Compliance Compliance isn’t a one-size-fits-all situation.

Risk

Security Boulevard

MARCH 29, 2023

Drug Enforcement Administration (DEA) was using Apple’s AirTags to help track drug manufacturers. The post DEA Using AirTags to Track Packages (and Drug Manufacturers) appeared first on Security Boulevard. According to the March 23 article by Thomas Brewster, “[B]order agents intercepted two packages from Shanghai, China.

Manufacturing

Thales Cloud Protection & Licensing

FEBRUARY 28, 2022

Win the connected and autonomous car race while protecting data privacy. Employing big data analytics to gather insights to capitalize on customer behavior, understand product performance, and predict failures. More data in more places means more risks. Tue, 03/01/2022 - 04:49.

Data privacy

Malwarebytes

JUNE 28, 2024

The online webshop pressures manufacturers to lower their prices even further to appease discount-seeking customers, leaving those manufacturers with little to no profit in return. Most items sold on Temu are unbranded and manufactured en masse by manufacturers in China.

Malware

SecureWorld News

JUNE 26, 2024

Impact on auto manufacturers and dealerships The ripple effects of this breach extend far beyond CDK Global itself, including: Data exposure – Dealerships using CDK Global's services may have had sensitive customer and operational data exposed, including financial information and personal details.

Manufacturing

Responsible Cyber

NOVEMBER 25, 2024

However, this dependence also introduces significant risks. Managing these risks—whether they stem from cybersecurity vulnerabilities, regulatory compliance, or operational disruptions—has become a top priority for organizations worldwide. Top Tools Provenance: A blockchain-based platform designed for supply chain transparency.

Technology

Responsible Cyber

NOVEMBER 17, 2024

What is a Third Party in Risk Management? In the context of Third-Party Risk Management (TPRM) , a third party is any external entity that an organization interacts with as part of its operations. These entities often have access to sensitive systems, data, or infrastructure, which makes managing risks associated with them a priority.

Risk

The Last Watchdog

MAY 28, 2021

I covered the aviation industry in the 1980s and 1990s when safety regulations proved their value by compelling aircraft manufacturers and air carriers to comply with certain standards, at a time when aircraft fleets were aging and new fly-by-wire technology introduced complex risks.

Cyber Attacks

Security Affairs

DECEMBER 21, 2018

We foresee regulations expanding beyond authentication and data privacy, and into more detailed requirements of network security and visibility into device bills of materials. not located behind routers or firewalls) to conduct future DDoS attacks on data centers and cloud services or for crypto currency mining purposes.

IoT

Malwarebytes

NOVEMBER 22, 2023

A small but telling example was a recent court case where a judge ruled that car manufacturers collecting users’ text messages and call logs did not meet the Washington Privacy Act’s (WPA) standard that a plaintiff must prove that “his or her business, his or her person, or his or her reputation” has been threatened.

Identity Theft

Security Affairs

OCTOBER 13, 2020

However, if you know where the dangers lurk, there is a way to minimize the cybersecurity risks. The Flaws in Manufacturing Process. Manufacturers saw this as an opportunity and rushed in to grab their own piece of the IoT market. Manufacturers saw this as an opportunity and rushed in to grab their own piece of the IoT market.

IoT

Centraleyes

SEPTEMBER 10, 2024

What is an OT Cyber Risk Framework? An OT Cyber Risk Framework is a structured approach designed to identify, assess, manage, and mitigate cybersecurity risks in Operational Technology environments. Mitigating these risks through targeted security controls and strategies tailored to OT environments.

Cyber Risk

Pen Test Partners

SEPTEMBER 29, 2024

Taking proactive steps can greatly reduce the risks if your phone is lost or stolen. This section covers essential measures like setting strong passwords, enabling encryption, backing up data, and using tracking apps. The process and effectiveness can vary depending on the manufacturer and model.

Data privacy

Security Boulevard

OCTOBER 16, 2024

These standards focus on protecting sensitive information, securing hybrid cloud environments , and ensuring that organizations can effectively manage risk. Many organizations use the NIST Cybersecurity Framework (CSF), the Risk Management Framework (RMF), and other guidelines to create a comprehensive security strategy.

Risk

Security Affairs

FEBRUARY 9, 2023

The smartphones analyzed by the r researchers were observed sending data to the device vendor and the Chinese mobile network operators (e.g., This malicious software puts users’ privacy at risk, it could be used to spy on users and unmasking of their identities. Chinese manufacturers have yet to comment on the research.

Mobile

SC Magazine

JUNE 14, 2021

Those companies can have thousands of requirements to comply with, ranging from data privacy and cybersecurity to HR and accounting. Four ways to better manage compliance risk. The categories should be tailored to the business, such as financial, cybersecurity, technological, HR, and manufacturing.

Risk

CyberSecurity Insiders

SEPTEMBER 1, 2021

Ensuri ng data privacy. Using 5G, the average person will produce 1 Gigabyte of data per day, and a substantial amount of that data will be sensitive information. This data will then be fed from disparate systems, and the vehicles will generate data back to those systems. .

Technology

SecureWorld News

MARCH 1, 2023

You would expect the manufacturer to be held accountable for selling you a defective product that can harm you or others. But what about software products that are riddled with vulnerabilities that can compromise your data, privacy, and security?

Software

Centraleyes

JULY 15, 2024

The rise of generative AI brings forth notable risks that need careful management to ensure the technology benefits society without causing undue harm. In this blog, we will explore the best strategies to reduce generative AI risk, addressing the various dimensions of security, legal, and ethical concerns.

Risk

SecureWorld News

JUNE 13, 2023

And so we think about different types of cybersecurity risk and how those risks or vulnerabilities or threat actors can actually impede that ability or an organization to meet those objectives," said Mary Faulkner, CISO at Thrivent, one of four panelists that took the stage to kick off the conference.

Cybersecurity

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management. Third-party risk management.

Government

Security Boulevard

FEBRUARY 14, 2022

How Enterprise Customer Identity Helps You Make Money, Slash Costs, and Reduce Risk. Here are four reasons why investing in great customer experiences with ForgeRock's enterprise CIAM will help your organization make money, slash costs, and reduce risk. Reduced Risk. ForgeRock also reduces risk with Zero Trust security.

Passwords

Thales Cloud Protection & Licensing

JUNE 6, 2018

Gartner defines digital risk management as “the integrated management of risks associated with digital business components, such as cloud, mobile, social, big data, third-party technology providers, OT and the IoT.” Best Practices for Digital Risk Management. Encryption of data at rest and in motion.

Risk

Malwarebytes

DECEMBER 6, 2022

The individual sections of the 17 digit number detail all manner of information about the car, ranging from manufacturer to attributes. If there was no way to pull this data together, you’d potentially have no real way of knowing what you may be getting yourself into as a buyer which could have major ramifications down the line.

Manufacturing

SecureWorld News

MAY 24, 2023

A recent report discovered that the manufacturing sector experienced a 107% increase in ransomware attacks last year, while healthcare systems continue to be one of the most threatened sectors. The IRS eFile website has reportedly come under attack , leading to serious data leaks and an invasion of consumer data privacy.

Cybersecurity

Security Boulevard

FEBRUARY 9, 2024

As consumers, it's important to balance necessity with risk, just like with everything else. IoT manufacturers need to do better. Insight #1 From toasters to toothbrushes , the Internet of Things (IoT) continues to wreak havoc on the internet.

CISO

Thales Cloud Protection & Licensing

JANUARY 3, 2024

Enterprises in these regions will adopt advanced data encryption techniques, like bring-your-own-key (BYOK) and hold-your-own-key (HYOK) systems, to meet growing demands for data sovereignty. Individuals will benefit from enhanced control over their data, backed by zero-knowledge proofs and other privacy-preserving technologies.

Banking

SecureWorld News

JANUARY 8, 2024

Surveillance and monitoring risks: The integration of AI into everyday computing could lead to increased surveillance capabilities. The AI might continuously monitor user inputs and interactions, leading to potential privacy invasions. This audio data could be sensitive and is susceptible to misuse if not adequately protected.

Artificial Intelligence

Responsible Cyber

MARCH 24, 2024

While this has brought numerous benefits, such as increased efficiency and access to global markets, it has also introduced new risks and challenges. One such risk is the potential for third-party risk in the supply chain. These external parties can include suppliers, vendors, contractors, and logistics providers, among others.

Risk

Security Boulevard

OCTOBER 11, 2024

However, industries reliant on shared devices—such as healthcare, retail, and manufacturing—face unique challenges. These fast-paced environments need a more flexible approach to balance security, speed, and user privacy. Similarly, in retail and manufacturing, delays caused by authentication procedures reduce overall efficiency.

Authentication

Thales Cloud Protection & Licensing

MARCH 10, 2021

Connectivity enables powerful, revenue-generating capabilities…from data telemetry and runtime analytics, to effectively predicting and maintenance requirements. There are so many reasons why manufacturers connect their products to the Internet, whether it’s industrial machines, medical devices, consumer goods or even cars.

IoT

The Security Ledger

OCTOBER 23, 2018

In the first segment, we talk with Thomas Harvey of the firm RMS about the problem of “silent cyber” risk to insurers and how better modeling of cyber incidents is helping to address that threat. Sure, that seemed like an unlikely (though not unprecedented ) risk. Part II: Cyber physical risk is real.

Insurance

The Security Ledger

MAY 3, 2022

The post Feel Good Ukraine Tractor Story Highlights Ag Cyber Risk appeared first on The Security Ledger with Paul F. Related Stories DEF CON: Security Holes in Deere, Case IH Shine Spotlight on Agriculture Cyber Risk Episode 235: Justine Bone of MedSec on Healthcare Insecurity Episode 234: Rep.

Cyber Risk