Government and IoT - Cyber Security Informer

Japanese Government Will Hack Citizens' IoT Devices

Schneier on Security

JANUARY 28, 2019

The Japanese government's decision to log into users' IoT devices has sparked outrage in Japan. However, the government's plan has its technical merits. Many of today's IoT and router botnets are being built by hackers who take over devices with default or easy-to-guess passwords.

IoT

IoT Government Firmware Hacking

New Report on IoT Security

Schneier on Security

SEPTEMBER 28, 2022

The Atlantic Council has published a report on securing the Internet of Things: “Security in the Billions: Toward a Multinational Strategy to Better Secure the IoT Ecosystem.”

IoT

IoT Telecommunications Manufacturing Internet

Understanding the U.S. Cyber Trust Mark: A New Era for IoT Security

SecureWorld News

JANUARY 8, 2025

From baby monitors to home security systems, these IoT products have become integral to daily life, yet they also present significant cybersecurity risks. Industry leaders back the initiative Key stakeholders have expressed their enthusiasm for the Cyber Trust Mark's potential to improve IoT security and consumer trust.

IoT

IoT Manufacturing Government Cybersecurity

Analyzing IoT Security Best Practices

Schneier on Security

JUNE 25, 2020

New research: " Best Practices for IoT Security: What Does That Even Mean? " We consider categories of best practices, and how they apply over the lifecycle of IoT devices. by Christopher Bellman and Paul C.

IoT

IoT Manufacturing Internet Internet

New IoT Security Regulations

Schneier on Security

NOVEMBER 13, 2018

While the US government is largely absent in this area of consumer protection, the state of California has recently stepped in and started regulating the Internet of Things, or "IoT" devices sold in the stateand the effects will soon be felt worldwide. It falls upon lawmakers to create laws that protect consumers.

IoT

IoT Manufacturing Internet Internet

SHARED INTEL Q&A: When every IoT Device and AI assistant has an identity — who’s in control?

The Last Watchdog

JUNE 2, 2025

LW: You talk about unifying posture, governance, and detection. Alcove: Traditional IAM tools grant access but they rarely help you govern it over time. By combining governance, posture, and detection into one system, Oleria gives security teams a complete, real-time picture. and get an answer you can act on immediately.

IoT

IoT CISO Government Accountability

Cybersecurity Governance: The Road Ahead in an Era of Constant Evolution

SecureWorld News

FEBRUARY 17, 2025

Cybersecurity governance has undergone a dramatic transformation over the past few decades. From its early days, where security was an afterthought to business operations, to the present, where it has become a board-level discussion, governance has had to adapt to an ever-evolving digital landscape.

Government

Government Cybersecurity Risk CISO

Study: Consumer security savvy is way behind IoT threat landscape

Tech Republic Security

DECEMBER 20, 2022

A new Comcast study hints at a major risk to businesses, governments and public systems due to poor cybersecurity in the booming Internet of Things industry. The post Study: Consumer security savvy is way behind IoT threat landscape appeared first on TechRepublic.

IoT

IoT Internet Internet Government

Measuring the Security of IoT Devices

Schneier on Security

OCTOBER 3, 2019

In August, CyberITL completed a large-scale survey of software security practices in the IoT environment, by looking at the compiled software. It represents a wide range of either found in the home, enterprise or government deployments. Vendors are Asus, Belkin, DLink, Linksys, Moxa, Tenda, Trendnet, and Ubiquiti.

IoT

IoT Firmware Data collection Architecture

STEPS FORWARD: Regulators are on the move to set much needed IoT security rules of the road

The Last Watchdog

SEPTEMBER 5, 2023

New government rules coupled with industry standards meant to give formal shape to the Internet of Things (IoT) are rapidly quickening around the globe. After all, government mandates combined with industry standards are the twin towers of public safety. Related: The need for supply chain security This is to be expected.

IoT

IoT Government Manufacturing Internet

Here’s how anyone with $20 can hire an IoT botnet to blast out a week-long DDoS attack

The Last Watchdog

AUGUST 27, 2018

A nascent cottage industry is starting to gel around DDoS botnets-for-hire , comprised of millions of compromised IoT devices. IoT botnets can be hired to execute smaller-scaled DDoS attacks designed to knock out a networked application, rather than a whole website. IoT force multiplier. But that’s not all.

DDOS

DDOS IoT Digital transformation Internet

MY TAKE: Securing the Internet of Everything: why self-healing devices are the next frontier

The Last Watchdog

FEBRUARY 10, 2025

Related: IoT growing at a 24% clip To get there to fully tap the potential of a hyper-interconnected ecosystem where devices, data, AI and humans converge to benefit humankind cybersecurity must first catch up. Not coincidentally, industry standards groups and government regulators have stepped forward to embrace a vital supporting role.

Internet

Internet Internet IoT Manufacturing

IoT Security & Threat Modeling

Adam Shostack

JANUARY 2, 2025

Expanding on the UK Government's The Uk Code of Practice for Consumer IoT Security and how it aligns with Threat Modeling. There's a new report out from the UK Government, The UK Code of Practice for Consumer IoT Security.

IoT

IoT Government Technology

IoT standards: The US government must create them, and businesses will follow

Tech Republic Security

DECEMBER 11, 2020

The Internet of Things is still in its Wild West phase of development. Standardization is necessary to ensure safety and easier integration.

IoT

IoT Government Internet Internet

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

Krebs on Security

MAY 20, 2025

The brief attack appears to have been a test run for a massive new Internet of Things (IoT) botnet capable of launching crippling digital assaults that few web destinations can withstand. Read on for more about the botnet, the attack, and the apparent creator of this global menace. For reference, the 6.3 Image: Cloudflare.

DDOS

DDOS IoT Internet Internet

Cybersecurity experts hail new IoT law

Tech Republic Security

DECEMBER 14, 2020

The bill would increase protection for the billions of connected devices "owned or controlled by the government" in homes and businesses.

IoT

IoT Cybersecurity Government

'Best Practices for IoT Security'

Adam Shostack

JANUARY 2, 2025

There's an interesting new draft, Best Practices for IoT Security: What Does That Even Mean? There's an interesting new draft, Best Practices for IoT Security:What Does That Even Mean? by Christopher Bellman and Paul C. van Oorschot. It's by Christopher Bellman and Paul C. van Oorschot.

IoT

IoT Manufacturing Internet Internet

IoT Security Workshop (Seattle, August)

Adam Shostack

JANUARY 2, 2025

[no description provided] Jean Camp and Yoshi Kohno are organizing an interesting workshop upcoming at the University of Washington on " Best Practices In The IoT :" Our agenda begins with a presentation on the Federal Government initiatives in the IoT.

IoT

IoT Government

Weekly Update 248

Troy Hunt

JUNE 19, 2021

If you like this sort of content then I'll try and be a bit more organised next time, give some notice and make more of an event out of it.

IoT

IoT Government Malware

Malvertising Campaign Targets IoT Devices: GeoEdge

eSecurity Planet

AUGUST 9, 2021

A malicious advertising campaign originating out of Eastern Europe and operating since at least mid-June is targeting Internet of Things (IoT) devices connected to home networks, according to executives with GeoEdge, which offers ad security and quality solutions to online and mobile advertisers. Malvertising is Evolving.

IoT

IoT Advertising Identity Theft Mobile

5G and IoT security: Why cybersecurity experts are sounding an alarm

Tech Republic Security

MARCH 2, 2020

Without regulation and strong proactive measures, 5G networks remain vulnerable to cyberattacks, and the responsibility falls on businesses and governments.

IoT

IoT Cybersecurity Government

Weekly Update 245

Troy Hunt

MAY 28, 2021

The IoT march forward continues, this time replacing old corroded and shitty-in-every-way halogen bulbs (night time shot of the front of the house to be added to that thread shortly.) References Pwned Passwords, the.NET Foundation and the FBI (this is just awesome from top to bottom ??)

Passwords

Passwords IoT Government

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

The Hacker News

JANUARY 8, 2025

government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things (IoT) consumer devices. IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission (FCC) said.

IoT

IoT Internet Internet Government

Amazing Fast Crypto for IoT — US NIST Fingers ASCON

Security Boulevard

FEBRUARY 9, 2023

Implementing modern cryptography standards on tiny IoT devices is hard. The post Amazing Fast Crypto for IoT — US NIST Fingers ASCON appeared first on Security Boulevard. They’re underpowered, need to sip battery charge and something like AES is often overkill.

IoT

IoT Internet Internet Mobile

Sepio Systems: Cybersecurity Expert Joseph Steinberg Joins Advisory Board

Joseph Steinberg

NOVEMBER 17, 2021

He frequently serves as a cybersecurity expert witness , advises businesses and governments on information security matters, and has amassed millions of readers as a regular columnist for Forbes and Inc. His opinions are also frequently cited in books, law journals, security publications, and general interest periodicals.

Cybersecurity

Cybersecurity Artificial Intelligence Government Information Security

Experts warn of China-linked APT’s Raptor Train IoT Botnet

Security Affairs

SEPTEMBER 18, 2024

Researchers warn of a new IoT botnet called Raptor Train that already compromised over 200,000 devices worldwide. Cybersecurity researchers from Lumen’s Black Lotus Labs discovered a new botnet, named Raptor Train, composed of small office/home office (SOHO) and IoT devices. “This botnet has targeted entities in the U.S.

IoT

IoT Wireless DDOS Architecture

Weekly Update 251

Troy Hunt

JULY 11, 2021

and I'm sure there'll be an all new stash of cyber-IoT-other things waiting for me at the end of it 🙂 References Finally got my first COVID shot! Next week will start getting back to full steam as the winter holidays end (yeah, it's winter here, I know that's confusing for some people!)

IoT

IoT Encryption Government

Brits Ban Default Passwords — and More IoT Stupidity

Security Boulevard

APRIL 30, 2024

The post Brits Ban Default Passwords — and More IoT Stupidity appeared first on Security Boulevard. The UK’s Product Security and Telecommunications Infrastructure Act aims to improve the security of net-connected consumer gear.

IoT

IoT Passwords Social Engineering Telecommunications

Weekly Update 212

Troy Hunt

OCTOBER 9, 2020

There's a decidedly adult theme running across the topics not by design, but just by pure coincidence between the Grindr incident, a query I got regarding erasing one's adult website browsing history and the IoT male chastity device full of security holes and potential requiring a grinder (not Grindr!) We live in interesting times.

IoT

IoT Government

Inrupt’s Solid Announcement

Schneier on Security

NOVEMBER 13, 2020

Data generated by your things — your computer, your phone, your IoT whatever — is written to your pod. It’s exciting to see organizations using Solid to improve the lives of everyday people – through better healthcare, more efficient government services and much more.

Insurance

Insurance IoT Healthcare Technology

Benchmarks Q&A: What the finance sector’s new X9 PKI standard signals for other industries

The Last Watchdog

MAY 6, 2025

This new standard solves for interoperability, security, and governance, all in a sector-specific context. Healthcare, critical infrastructure, and IoT all have unique needs. But the core theme will remain: better interoperability, stronger governance, and crypto agility at scale. Sinha: Interoperability. Sinha: Its very likely.

Healthcare

Healthcare Banking Internet Internet

RSAC Fireside Chat: X9 PKI emerges to help financial sector interoperate, get ready for ‘Q-Day’

The Last Watchdog

APRIL 24, 2025

Related: PKI and the IoT cloud One quiet but consequential development now taking root in the financial sector could prove pivotal: the emergence of a dedicated Public Key Infrastructure (PKI) framework, tailored to banks and payment networks, guided by the Accredited Standards Committee X9 (ASC X9), and being rolled out by DigiCert.

Banking

Banking Internet Internet IoT

Protecting Oil and Gas Industry Infrastructure: Strategies for Resilience

SecureWorld News

JANUARY 16, 2025

Digital transformation: The integration of IoT, SCADA systems, and advanced analytics has increased operational efficiency but also expanded the attack surface. Leverage data analysis: Data analytics and IoT technologies are revolutionizing the oil and gas sector, enabling better monitoring and threat detection.

Energy and Utilities

Energy and Utilities IoT Backups Artificial Intelligence

Weekly Update 249

Troy Hunt

JUNE 25, 2021

References We had some really nice downtime in a very tranquil environment (tweet thread of the holiday with pics) Spam sucks, even when the spammer doesn't think they're spamming (this one is going straight into the draft post I have on spam still being spam) I've finally upgraded Charlotte from a Mac to a Lenovo running Windows 10!

IoT

IoT Government

Keep the lights on: Three things power companies need to do to harden cybersecurity defenses

Tech Republic Security

JULY 1, 2020

IoT device makers and the US government need to collaborate with the industry to make sure digital transformation closes security gaps instead of opening new ones.

Digital transformation

Digital transformation IoT Government Cybersecurity

How Will 5G Technology Alter IoT Security And How Can We Prepare?

CyberSecurity Insiders

JANUARY 28, 2022

Moreover, predictions made by Gartner indicate that a staggering 59% of organizations plan to support their IoT networks through 5G- which opens up new avenues for cybercriminals to exploit. This article explores the possible ramifications that 5G could have for IoT security, along with some steps that enterprises can take to prepare for it.

IoT

IoT Technology Mobile Software

Ghost Ransomware a Persistent Global Threat to Critical Infrastructure

SecureWorld News

FEBRUARY 20, 2025

The FBI, CISA, and MS-ISAC have issued a joint cybersecurity advisory warning organizations about Ghost (Cring) ransomware, a sophisticated cyber threat that has been compromising critical infrastructure, businesses, and government entities worldwide.

Ransomware

Ransomware IoT Encryption Social Engineering

IoT Consumer Labeling Goes Global – What This Means for Vendors and Consumers

Security Boulevard

MARCH 21, 2024

IoT producers must comprehend the relevant rules, consult legal and technological experts and evaluate cybersecurity procedures. The post IoT Consumer Labeling Goes Global – What This Means for Vendors and Consumers appeared first on Security Boulevard.

IoT

IoT Technology Cybersecurity Internet

Updated Kmsdx botnet targets IoT devices

Security Affairs

AUGUST 28, 2023

Researchers spotted an updated version of the KmsdBot botnet that is now targeting Internet of Things (IoT) devices. The Akamai Security Intelligence Response Team (SIRT) discovered a new version of the KmsdBot botnet that employed an updated Kmsdx binary targeting Internet of Things (IoT) devices.

IoT

IoT DDOS Architecture Internet

Inrupt, Tim Berners-Lee's Solid, and Me

Schneier on Security

FEBRUARY 21, 2020

Data generated by your things -- your computer, your phone, your IoT whatever -- is written to your pod. Either IoT companies are going to enter into individual data sharing agreements, or they'll all use the same language and protocols. The idea behind Solid is both simple and extraordinarily powerful.

IoT

IoT Internet Internet Technology

The SBOM Survival Guide: Why SBOM Compliance is Set to Ignite IoT Security

Security Boulevard

SEPTEMBER 11, 2024

The post The SBOM Survival Guide: Why SBOM Compliance is Set to Ignite IoT Security appeared first on Security Boulevard. Once SBOM and IAM provisioning knit seamlessly with policy-driven data encryption and AI-powered monitoring, they will have a far stronger security posture.

IoT

IoT Encryption Risk Government

Exclusive: Pro-Russia group ‘Cyber Spetsnaz’ is attacking government agencies

Security Affairs

JUNE 6, 2022

Following the attacks of the Killnet Collective, the group responsible for the attacks against major government resources and law enforcement, a new group has been identified called “Cyber Spetsnaz”. The post Exclusive: Pro-Russia group ‘Cyber Spetsnaz’ is attacking government agencies appeared first on Security Affairs.

Government

Government DDOS Cyber Attacks Hacking

The government of Lithuania confirmed it had been hit by an intense cyberattack

Security Affairs

JUNE 27, 2022

The government of Lithuania announced on Monday that it had been hit by an “intense” cyberattack, likely launched from Moscow, days after the Russian government protested restrictions Vilnius imposed on the rail transit of certain goods to Kaliningrad. which was one of the 1st targets of the new campaign.

Government

Government DDOS Media IoT

Japanese Government Will Hack Citizens' IoT Devices

New Report on IoT Security

Trending Sources

Understanding the U.S. Cyber Trust Mark: A New Era for IoT Security

Analyzing IoT Security Best Practices

New IoT Security Regulations

SHARED INTEL Q&A: When every IoT Device and AI assistant has an identity — who’s in control?

Cybersecurity Governance: The Road Ahead in an Era of Constant Evolution

Study: Consumer security savvy is way behind IoT threat landscape

Measuring the Security of IoT Devices

STEPS FORWARD: Regulators are on the move to set much needed IoT security rules of the road

Here’s how anyone with $20 can hire an IoT botnet to blast out a week-long DDoS attack

MY TAKE: Securing the Internet of Everything: why self-healing devices are the next frontier

IoT Security & Threat Modeling

IoT standards: The US government must create them, and businesses will follow

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

Cybersecurity experts hail new IoT law

'Best Practices for IoT Security'

IoT Security Workshop (Seattle, August)

Weekly Update 248

Malvertising Campaign Targets IoT Devices: GeoEdge

Top IoT Security Solutions of 2021

5G and IoT security: Why cybersecurity experts are sounding an alarm

Weekly Update 245

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

Amazing Fast Crypto for IoT — US NIST Fingers ASCON

Sepio Systems: Cybersecurity Expert Joseph Steinberg Joins Advisory Board

Experts warn of China-linked APT’s Raptor Train IoT Botnet

Weekly Update 251

Brits Ban Default Passwords — and More IoT Stupidity

Weekly Update 212

Inrupt’s Solid Announcement

Benchmarks Q&A: What the finance sector’s new X9 PKI standard signals for other industries

RSAC Fireside Chat: X9 PKI emerges to help financial sector interoperate, get ready for ‘Q-Day’

Protecting Oil and Gas Industry Infrastructure: Strategies for Resilience

Weekly Update 249

Keep the lights on: Three things power companies need to do to harden cybersecurity defenses

How Will 5G Technology Alter IoT Security And How Can We Prepare?

Ghost Ransomware a Persistent Global Threat to Critical Infrastructure

IoT Consumer Labeling Goes Global – What This Means for Vendors and Consumers

Updated Kmsdx botnet targets IoT devices

Inrupt, Tim Berners-Lee's Solid, and Me

The SBOM Survival Guide: Why SBOM Compliance is Set to Ignite IoT Security

Exclusive: Pro-Russia group ‘Cyber Spetsnaz’ is attacking government agencies

The government of Lithuania confirmed it had been hit by an intense cyberattack

Stay Connected