Troy Hunt

NOVEMBER 25, 2020

In part 1 of this series, I posited that the IoT landscape is an absolute mess but Home Assistant (HA) does an admirable job of tying it all together. I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Now for the big challenge - security. Let's dive into it.

IoT 358

IoT Firmware Risk Manufacturing 358

Malwarebytes

MAY 4, 2022

Researchers have found a vulnerability in a popular C standard library in IoT products that could allow attackers to perform DNS poisoning attacks against a target device. Because uClibc is a relatively small C standard library intended for Linux kernel-based operating systems for embedded systems and mobile devices.

IoT 116

IoT DNS Risk Internet 116

Security Affairs

DECEMBER 24, 2018

Security researchers discovered some flaws in the Twinkly IoT lights that could be exploited display custom lighting effects and to remotely turn off them. Twinkly smart decoration could be controlled via a mobile app, the experts focused their tests on the communication. ” reads the analysis published by MWR InfoSecurity.

IoT 82

IoT Hacking DNS Authentication 82

eSecurity Planet

AUGUST 22, 2023

Expanding attack surfaces require additional skills to secure, maintain, and monitor an ever-expanding environment of assets such as mobile, cloud, and the internet of things (IoT). assets (endpoints, servers, IoT, routers, etc.), and installed software (operating systems, applications, firmware, etc.).

Telecommunications 98

Telecommunications Firewall Penetration Testing Cybersecurity 98

eSecurity Planet

FEBRUARY 16, 2021

Malicious mobile app. Always change the default passwords for any IoT devices you install before extended use. However, a growing number of botnet attacks are used against IoT devices and their connected networks. ” Malicious Mobile Apps. How to Defend Against a Malicious Mobile App. Jump ahead: Adware.

Malware 105

Malware Adware Spyware Antivirus 105

eSecurity Planet

MARCH 22, 2023

For improved security using mobile phones, free authentication apps are available from Google, Microsoft, and others. Similarly, spoofed domain name system (DNS) and IP addresses can redirect users from legitimate connections to dangerous and malicious websites. connections to IoT, OT, and rogue wi-fi routers.

Firewall 109

Firewall Network Security Penetration Testing Encryption 109

eSecurity Planet

MARCH 16, 2023

DNS attacks : DNS cache poisoning, or hijacking, redirects a legitimate site’s DNS address and takes users to a malicious site when they attempt to navigate to that webpage. This includes IoT devices. Sooner rather than later, you’ll want to perform an audit of your OT and IoT devices. Segmentation.

Network Security 109

Network Security Firewall Internet Internet 109