Firmware, Internet, IoT and Software - Cyber Security Informer

IoT Unravelled Part 3: Security

Troy Hunt

NOVEMBER 25, 2020

In part 1 of this series, I posited that the IoT landscape is an absolute mess but Home Assistant (HA) does an admirable job of tying it all together. I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Now for the big challenge - security. Let's dive into it.

IoT

IoT Firmware Risk Manufacturing

P2P Weakness Exposes Millions of IoT Devices

Krebs on Security

APRIL 26, 2019

The security flaws involve iLnkP2P , software developed by China-based Shenzhen Yunni Technology. iLnkP2p is bundled with millions of Internet of Things (IoT) devices, including security cameras and Webcams, baby monitors, smart doorbells, and digital video recorders. A Webcam made by HiChip that includes the iLnkP2P software.

IoT

IoT Firewall Manufacturing Computers and Electronics

Securing Public Sector Against IoT Malware in 2024

Security Boulevard

JANUARY 11, 2024

The rapid proliferation of the Internet of Things (IoT) represents vast opportunities for the public sector. However, as IoT innovation and adoption grows, so do the associated security risks. Today’s Internet of Things might as well be called the Internet of Threats.

IoT

IoT Malware Education Government

Webinars

Reimagining Cybersecurity Training: Driving Real Impact on Security Culture

MORE WEBINARS

Attacks Escalating Against Linux-Based IoT Devices

eSecurity Planet

JANUARY 20, 2022

Incidents of malware targeting Linux-based Internet of Things (IoT) devices jumped by more than a third in 2021, with three malware families the primary drivers behind the increase. Threats to Open Source, IoT. Also read: Top IoT Security Solutions for 2022. A Fast-Growing Attack Surface.

IoT

IoT DDOS Malware Internet

The Internet of Things Is Everywhere. Are You Secure?

Security Boulevard

MARCH 18, 2021

From smart homes that enable you to control your thermostat from a distance to sensors on oil rigs that help predict maintenance to autonomous vehicles to GPS sensors implanted in the horns of endangered black rhinos , the internet of things is all around you. With the increase in connected devices comes an increase in IoT attacks.

Internet

Internet Internet IoT Software

Researchers used electromagnetic signals to classify malware infecting IoT devices

Security Affairs

JANUARY 5, 2022

Cybersecurity researchers demonstrate how to use electromagnetic field emanations from IoT devices to detect malware. The researchers proposed a novel approach of using side channel information to identify malware targeting IoT systems. kernel-level rootkits), which are able to prevent software-based analysis methods.”

IoT

IoT Malware Internet Internet

Hacking IoT & RF Devices with BürtleinaBoard

Security Affairs

JULY 28, 2020

How to hack IoT & RF Devices with BürtleinaBoard. Few months ago I have presented #FocacciaBoard : a similar multipurpose breakout board that uses the famous FT232H to handle multiple protocols commonly found in (I)IoT devices (i.e. his majesty, the Firmware). In a couple of minutes you should get extracted the firmware.

IoT

IoT Hacking Firmware Advertising

Overview of IoT threats in 2023

SecureList

SEPTEMBER 21, 2023

IoT devices (routers, cameras, NAS boxes, and smart home components) multiply every year. The first-ever large-scale malware attacks on IoT devices were recorded back in 2008, and their number has only been growing ever since. Telnet, the overwhelmingly popular unencrypted IoT text protocol, is the main target of brute-forcing.

IoT

IoT DDOS Passwords Malware

Use cases of secure IoT deployment

Thales Cloud Protection & Licensing

MAY 31, 2021

Use cases of secure IoT deployment. In our previous blog post , we discussed the challenges for securing IoT deployments, and how businesses and consumers benefit from authenticating and validating IoT software and firmware updates. Tue, 06/01/2021 - 06:55. Use case 1: Fortune 500 Healthcare Company.

IoT

IoT Computers and Electronics Manufacturing Firmware

Recent Tesla Hacks Highlight Importance of Protecting Connected Devices

eSecurity Planet

FEBRUARY 2, 2024

Within the last couple of months, smart device vulnerabilities have been piling up, prompting businesses to protect their Internet of Things (IoT) environments. While Teslas aren’t the typical business IoT device, their connection to the internet makes them a cyber threat as much as your business’s other IoT technology.

Hacking

Hacking IoT Firmware Cybersecurity

Guest Blog: TalkingTrust. What’s driving the security of IoT?

Thales Cloud Protection & Licensing

MARCH 10, 2021

What’s driving the security of IoT? There are so many reasons why manufacturers connect their products to the Internet, whether it’s industrial machines, medical devices, consumer goods or even cars. First off, connected vehicles and IoT devices are highly attractive targets to hackers. Thu, 03/11/2021 - 07:39.

IoT

IoT Firmware Manufacturing Encryption

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Security Affairs

OCTOBER 13, 2020

The number of sensors and smart devices connected to the internet is exponentially rising, which are the 5 Major Vulnerabilities for IoT devices. If you take a look at the global market for IoT, you can easily spot the trend. IoT devices are exposed to cybersecurity vulnerabilities. The Threat is Definitely Real.

IoT

IoT Cybersecurity Manufacturing Internet

Critical Success Factors to Widespread Deployment of IoT

Thales Cloud Protection & Licensing

FEBRUARY 16, 2021

Critical Success Factors to Widespread Deployment of IoT. Digital technology and connected IoT devices have proliferated across industries and into our daily lives. Finally, IoT devices are being used extensively in smart vehicles and home appliances to provide enhanced user experiences. Threat vectors on IoT.

IoT

IoT Manufacturing Energy and Utilities Data collection

March to 5G could pile on heavier security burden for IoT device manufacturers

SC Magazine

APRIL 9, 2021

As the Department of Defense works on standards to dictate 5G rollout, security requirements may be too much for IoT manufacturers. Of course, many security hurdles for IoT device manufacturers are not specific to 5G. The Internet of Things Cybersecurity Improvement Act of 2020 , which was enacted Dec.

Manufacturing

Manufacturing IoT Firmware Architecture

Why Healthcare IoT Requires Strong Machine Identity Management

Security Boulevard

MAY 30, 2022

Why Healthcare IoT Requires Strong Machine Identity Management. The healthcare industry has been leveraging IoT devices for years, steadily increasing its use in facilities and patient care. By 2027, the IoT in Healthcare market is expected to reach $290 billion , up from just $60 billion in 2019. brooke.crothers.

Healthcare

Healthcare IoT Manufacturing Risk

Spyware in the IoT – the Biggest Privacy Threat This Year

SiteLock

AUGUST 27, 2021

Simply defined, the internet of things (IoT) is a network of Internet-connected objects able to collect and exchange data. In today’s digital-driven world, IoT connects almost everything including homes, offices, and vehicles, allowing users the convenience of activating and operating nearly any device remotely.

IoT

IoT Spyware VPN Passwords

Unfixed vulnerability in popular library puts IoT products at risk

Malwarebytes

MAY 4, 2022

Researchers have found a vulnerability in a popular C standard library in IoT products that could allow attackers to perform DNS poisoning attacks against a target device. These functions can be called upon when needed so they do not have to be included in the code of the software that uses it. It’s just a matter of symptom management.

IoT

IoT DNS Risk Internet

To Make the Internet of Things Safe, Start with Manufacturing

Thales Cloud Protection & Licensing

SEPTEMBER 11, 2018

This aptly describes the Internet of Things (IoT), where many small things are coming together to shape what we all hope will deliver a great leap in the way we live and do business. According to Maciej Kranz, Cisco VP for strategic innovation, writing for IoTechExpo.com , “[In 2018] IoT security will become the No.

Manufacturing

Manufacturing Internet Internet IoT

Device manufacturers need to rethink how to lock down IoT

SC Magazine

MAY 27, 2021

Today’s columnist, Matt Wyckhouse of Finite State, says to lock down IoT devices, manufacturers have to build security in from the start. Embedded, internet-connected devices control the most critical infrastructure on the planet. billion IoT devices expected to hit the market globally by 2025. Threat actors have noticed.

Manufacturing

Manufacturing IoT Firmware Software

Realtek SDK flaws exploited to deliver Mirai bot variant

Security Affairs

AUGUST 24, 2021

Realtek published a security advisory on August 15 to warn customers about security updates to address vulnerabilities in its software developers kits (SDK) which is used by at least 65 separate vendors. On August 15, firmware security company IoT Inspector published details about the flaws. ” reported IoT Inspector.

IoT

IoT Firmware Internet Internet

IoT and Machine Identity Management in Financial Services

Security Boulevard

JUNE 28, 2022

IoT and Machine Identity Management in Financial Services. How is IoT changing the financial sector? IoT has already positively impacted the financial sector and will only continue to in the future. The most notable and well-documented example of investment in the IoT infrastructure has been by retail banks.

Financial Services

Financial Services IoT Banking Retail

News Alert: Swissbit introduces small-capacity memory for IIoT, smart city applications

The Last Watchdog

JUNE 27, 2023

Typical applications include green IIoT technologies like charging stations, smart meters, and PV inverters, for which only a small amount of memory is required to run boot software or to communicate with cloud applications. Swissbit combines its unique competences in storage and embedded IoT technology with its advanced packaging knowhow.

IoT

IoT Manufacturing Media Technology

Does Your Coffee Maker Need IoT Security?

SiteLock

AUGUST 27, 2021

There’s no bigger buzzword in the security world now than the ‘Internet of Things.’ The Internet of Things, or IoT, is the connectedness of everyday devices and sensors to allow the quantification and control of systems. Therefore, IoT security must be a consideration and, ideally, a foundational characteristic in their design.

IoT

IoT Wireless Internet Internet

IoT Devices and HIPAA Compliance: 6 Things Healthcare Orgs Must Know

SecureWorld News

JUNE 14, 2022

I love the possibilities that Internet of Things (IoT) products bring to our lives. But I'm also very concerned about the associated security and privacy risks that IoT products inherently bring to those using them when controls do not exist or are not used to mitigate the risks. Consider just a few recent statistics.

IoT

IoT Healthcare Risk Firmware

Episode 254: Dennis Giese’s Revolutionary Robot Vacuum Liberation Movement

The Security Ledger

DECEMBER 19, 2023

Security researcher and IoT hacker Dennis Giese talks about his mission to liberate robot vacuums from the control of their manufacturers, letting owners tinker with their own devices and - importantly - control the data they collect about our most intimate surroundings. Forget the IoT. Read the whole entry. »

IoT

IoT Manufacturing Internet Internet

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. The question is, who is hacking the internet of things today, and how does one even get started? Funny thing.

IoT

IoT Hacking Internet Internet

The Hacker Mind: Hacking IoT

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. The question is, who is hacking the internet of things today, and how does one even get started? Funny thing.

IoT

IoT Hacking Internet Internet

Signed, Sealed, Delivered! Code Signing Makes Software Yours

Thales Cloud Protection & Licensing

NOVEMBER 7, 2018

That is not much different from what happens with software and firmware code signing today. Whether it is a software upgrade for a program, a mobile application, or firmware for a device, code is signed, sealed, and delivered, and you are left with the future in your hands! Why Is Code Signing Important?

Software

Software Firmware IoT Authentication

The High-Stakes Game of Ensuring IoMT Device Security

SecureWorld News

FEBRUARY 17, 2024

Being constantly connected to the internet, they are either protected by basic passwords or, in some cases, have no password protection at all. Challenges in securing IoMT devices The Internet of Medical Things (IoMT) is essentially a subset of the wider Internet of Things (IoT) concept.

Healthcare

Healthcare Manufacturing Internet Internet

NAME:WRECK, a potential IoT trainwreck

Malwarebytes

APRIL 13, 2021

Since the vulnerable DNS clients are usually exposed to the internet this creates a huge attack surface. Basically, you could say DNS is the phonebook of the internet. FreeBSD, Nucleus NET and NetX have been patched recently, and device vendors using this software should provide their own updates to customers. Some background.

IoT

IoT DNS Internet Internet

MY TAKE: ‘Digital trust’ has a huge role to play mitigating cybersecurity threats, going forward

The Last Watchdog

MAY 23, 2022

Then the Internet took off and trusting the connection between a user’s device and a web server became of paramount importance. Software-defined-everything is the order of the day. Today, software developers are king and agile software is their golden chalice. Today we’re in the throes of digital transformation.

Digital transformation

Digital transformation Computers and Electronics Cybersecurity Encryption

VulnRecap 1/16/24 – Major Firewall Issues Persist

eSecurity Planet

JANUARY 16, 2024

Continue to monitor all of your software for potential malicious behavior, but this week, monitor network appliances in particular. January 11, 2024 Smart Thermostat from Bosch Puts Offices in Danger Type of vulnerability: Malicious commands sent from an attacker to the thermostat, including potentially replacing firmware with rogue code.

Firewall

Firewall Firmware IoT Authentication

D-Link issues beta hotfix for multiple flaws in DIR-3040 routers

Security Affairs

JULY 17, 2021

Network equipment vendor D-Link has released a firmware hotfix to fix multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router. Network equipment vendor D-Link has released a firmware hotfix to address multiple vulnerabilities affecting the DIR-3040 AC3000-based wireless internet router.

Firmware

Firmware Wireless Passwords Internet

Interview With a Crypto Scam Investment Spammer

Krebs on Security

MAY 22, 2023

According to the hacker, their spam software has been in private use until the last few weeks, when it was released as open source code. “There was nothing in the Mastodon software to detect that activity, and the protocol is not designed to handle this.”

Scams

Scams DDOS Cryptocurrency Accountability

A new Zerobot variant spreads by exploiting Apache flaws

Security Affairs

DECEMBER 22, 2022

Microsoft Threat Intelligence Center (MSTIC) researchers discovered a new variant of the Zerobot botnet (aka ZeroStresser) that was improved with the capabilities to target more Internet of Things (IoT) devices. Adopt a comprehensive IoT security solution. The IT giant is tracking this cluster of threat activity as DEV-1061.

IoT

IoT DDOS Malware Firmware

Millions of IoT Devices exposed to remote hacks due to iLnkP2P flaws

Security Affairs

APRIL 26, 2019

Experts discovered security flaws in the iLnkP2P peer-to-peer (P2P) system that exposes millions of IoT devices to remote attacks. The iLnkP2P system allows users to remotely connect to their IoT devices using a mobile phone or a PC. Potentially affected IoT devices include cameras and smart doorbells. Pierluigi Paganini.

IoT

IoT Hacking Manufacturing Advertising

Patch Management vs Vulnerability Management: What’s the Difference?

eSecurity Planet

APRIL 28, 2023

Third-party vendor systems include Operating Systems (OS), firmware (software installed on hardware), and applications. Patch management seeks to maintain IT equipment in optimal condition and add features when available through the acquisition, testing, and application of third-party software updates (aka: patches).

Penetration Testing

Penetration Testing IoT Firmware Software

Understanding IoT Security Challenges – An Interview with an Industry Expert

Thales Cloud Protection & Licensing

SEPTEMBER 12, 2018

The Internet of Things (IoT) is rapidly growing and expected to affect all industry verticals as well as our private lives. In this blog, we reached out to our technology partner Nexus to better understand the challenges that the industry faces to ensure safe deployment and management of IoT technologies. Weak authentication.

IoT

IoT Computers and Electronics Authentication Marketing

Spotlight: CTIA’s IoT Cybersecurity Certification is a Big Deal. Here’s why.

The Security Ledger

MARCH 13, 2019

Forget about Congress's latest attempt to regulate IoT security. The post Spotlight: CTIA’s IoT Cybersecurity Certification is a Big Deal. Forget about Congress’s latest attempt to regulate IoT security. to reign in insecure IoT endpoints. CTIAs new certification is the toothiest standard going.

IoT

IoT Cybersecurity Internet Internet

Threat actors exploit discontinues Boa web servers to target critical infrastructure

Security Affairs

NOVEMBER 24, 2022

The Boa web server is widely used across a variety of devices, including IoT devices, and is often used to access settings and management consoles as well as sign-in screens. The researchers identified over 1 million internet-exposed Boa server components around the world over the span of a week. ” concludes the report.

IoT

IoT Firmware Software Risk

Beyond the Office: Securing Home Devices and Networks Against Corporate Breaches

SecureWorld News

OCTOBER 8, 2023

Let devices go into sleep mode to allow for automatic software updates. Turn off the internet connection if you will not be using it for an extended period. Use the administrator account only for maintenance, software installation, or firmware updates. Opt for strong, hard-to-crack passwords.

Firmware

Firmware IoT Accountability Passwords

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

CyberSecurity Insiders

NOVEMBER 11, 2021

Deployed with more than 30 exploits, it has the potential of targeting millions of routers and IoT devices. Golang (also known as Go) is an open-source programming language designed by Google and first published in 2007 that makes it easier for developers to build software. Ax with firmware 1.04b12 and earlier. Background.

Malware

Malware IoT Firmware Authentication

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

JULY 25, 2023

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. SocksEscort[.]com com , is what’s known as a “SOCKS Proxy” service. WHO’S BEHIND SOCKSESCORT?

Malware

Malware VPN Internet Internet

The Internet of Things: Security Risks Concerns

Spinone

MARCH 17, 2018

The Internet of Things (IoT) is a term used to describe the network of interconnected electronic devices with “smart” technology. billion “things” connected to the Internet , a 30% increase from 2015. There are several reasons why the Internet of Things is such a threat to our digital security.

Internet

Internet Internet Risk Computers and Electronics

IoT Unravelled Part 3: Security

P2P Weakness Exposes Millions of IoT Devices

Webinars

Trending Sources

Securing Public Sector Against IoT Malware in 2024

Webinars

Attacks Escalating Against Linux-Based IoT Devices

The Internet of Things Is Everywhere. Are You Secure?

Researchers used electromagnetic signals to classify malware infecting IoT devices

Hacking IoT & RF Devices with BürtleinaBoard

Overview of IoT threats in 2023

Use cases of secure IoT deployment

Recent Tesla Hacks Highlight Importance of Protecting Connected Devices

Guest Blog: TalkingTrust. What’s driving the security of IoT?

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Critical Success Factors to Widespread Deployment of IoT

March to 5G could pile on heavier security burden for IoT device manufacturers

Why Healthcare IoT Requires Strong Machine Identity Management

Spyware in the IoT – the Biggest Privacy Threat This Year

Unfixed vulnerability in popular library puts IoT products at risk

To Make the Internet of Things Safe, Start with Manufacturing

Device manufacturers need to rethink how to lock down IoT

Realtek SDK flaws exploited to deliver Mirai bot variant

IoT and Machine Identity Management in Financial Services

News Alert: Swissbit introduces small-capacity memory for IIoT, smart city applications

Does Your Coffee Maker Need IoT Security?

IoT Devices and HIPAA Compliance: 6 Things Healthcare Orgs Must Know

Episode 254: Dennis Giese’s Revolutionary Robot Vacuum Liberation Movement

The Hacker Mind: Hacking IoT

The Hacker Mind: Hacking IoT

Signed, Sealed, Delivered! Code Signing Makes Software Yours

The High-Stakes Game of Ensuring IoMT Device Security

NAME:WRECK, a potential IoT trainwreck

MY TAKE: ‘Digital trust’ has a huge role to play mitigating cybersecurity threats, going forward

VulnRecap 1/16/24 – Major Firewall Issues Persist

D-Link issues beta hotfix for multiple flaws in DIR-3040 routers

Interview With a Crypto Scam Investment Spammer

A new Zerobot variant spreads by exploiting Apache flaws

Millions of IoT Devices exposed to remote hacks due to iLnkP2P flaws

Patch Management vs Vulnerability Management: What’s the Difference?

Understanding IoT Security Challenges – An Interview with an Industry Expert

Spotlight: CTIA’s IoT Cybersecurity Certification is a Big Deal. Here’s why.

Threat actors exploit discontinues Boa web servers to target critical infrastructure

Beyond the Office: Securing Home Devices and Networks Against Corporate Breaches

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

Who and What is Behind the Malware Proxy Service SocksEscort?

The Internet of Things: Security Risks Concerns

Stay Connected