New Report on IoT Security
Schneier on Security
SEPTEMBER 28, 2022
The Atlantic Council has published a report on securing the Internet of Things: “Security in the Billions: Toward a Multinational Strategy to Better Secure the IoT Ecosystem.”
Internet IoT Risk 
IoT Unravelled Part 3: Security
Troy Hunt
NOVEMBER 25, 2020
In part 1 of this series, I posited that the IoT landscape is an absolute mess but Home Assistant (HA) does an admirable job of tying it all together. As with the rest of the IoT landscape, there's a lot of scope for improvement here and also just like the other IoT posts, it gets very complex for normal people very quickly.
IoT 
363
363 Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Public Hearing on IoT Risks
Schneier on Security
APRIL 3, 2018
The US Consumer Product Safety Commission is holding hearings on IoT risks: The U.S. Consumer Product Safety Commission (CPSC, Commission, or we) will conduct a public hearing to receive information from all interested parties about potential safety issues and hazards associated with internet-connected consumer products.
IoT 237
237 
Top 6 security risks associated with industrial IoT
Tech Republic Security
NOVEMBER 23, 2022
Industrial IoT is gaining adoption, but this comes with some security risks. The post Top 6 security risks associated with industrial IoT appeared first on TechRepublic. Check out the dangers and how you can avoid them.
IoT 217
217 
Understanding the U.S. Cyber Trust Mark: A New Era for IoT Security
SecureWorld News
JANUARY 8, 2025
Cyber Trust Mark, a voluntary cybersecurity labeling program designed to help consumers make informed decisions about the security of their internet-connected devices. From baby monitors to home security systems, these IoT products have become integral to daily life, yet they also present significant cybersecurity risks.
IoT 116
116 
Yet Another IoT Cybersecurity Document
Schneier on Security
SEPTEMBER 27, 2018
This one is from NIST: " Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks." It's still in draft. Remember, there are many others.
IoT 229
229 
New IoT Security Regulations
Schneier on Security
NOVEMBER 13, 2018
Due to ever-evolving technological advances, manufacturers are connecting consumer goods -- from toys to lightbulbs to major appliances -- to the internet at breakneck speeds. This is the Internet of Things, and it's a security nightmare. But like nearly all innovation, there are risks involved. This law is not a panacea.
IoT 261
261 
LW ROUNDTABLE — How 2024’s cyber threats will transform the security landscape in 2025
The Last Watchdog
DECEMBER 16, 2024
Businesses must adopt tools and automation capable of invoking immediate action, even at the risk of false positives. Raising security baselines across industries is essential, with risk mitigationnot acceptancebecoming the standard. Security teams will need to address the unique risks posed using LLMs in mission critical environments.
Cyber threats 264
264 
How internet-facing webcams could put your organization at risk
Tech Republic Security
MARCH 13, 2023
By exploiting webcams and other IoT devices, hackers can spy on private and professional conversations, potentially giving them access to sensitive information, says BitSight. The post How internet-facing webcams could put your organization at risk appeared first on TechRepublic.
Internet 174
174 
MY TAKE: Why companies and consumers must collaborate to stop the plundering of IoT systems
The Last Watchdog
NOVEMBER 9, 2020
The Internet of Things (IoT) has come a long, long way since precocious students at Carnegie Melon University installed micro-switches inside of a Coca-Cola vending machine so they could remotely check on the temperature and availability of their favorite beverages. The mainstreaming of IoT IoT very clearly has gone mainstream.
IoT 279
279 
What Would It Look Like If We Put Warnings on IoT Devices Like We Do Cigarette Packets?
Troy Hunt
OCTOBER 13, 2017
Part of this data was collected via an IoT device called the InnoTab which is a wifi connected tablet designed for young kids; think Fisher Price designing an iPad. But let's not stop there because in fairness to VTech, it's not like they're the only ones to have had serious issues in their IoT toys. You know what they hate?
IoT 279
279 
Study: Consumer security savvy is way behind IoT threat landscape
Tech Republic Security
DECEMBER 20, 2022
A new Comcast study hints at a major risk to businesses, governments and public systems due to poor cybersecurity in the booming Internet of Things industry. The post Study: Consumer security savvy is way behind IoT threat landscape appeared first on TechRepublic.
IoT 207
207 
6 ways to reduce your IoT attack surface
Tech Republic Security
NOVEMBER 7, 2022
As attackers target the ever-growing IoT attack surface, companies can reduce their risks with these six security best practices. The post 6 ways to reduce your IoT attack surface appeared first on TechRepublic.
IoT 217
217 News alert: IDT Corp., AccuKnox partner to deploy runtime security-powered CNAPP at the edge of IoT
The Last Watchdog
MARCH 25, 2025
FinTech and Communications Leader, IDT Corporation partners with AccuKnox to deploy runtime security-powered CNAPP (Cloud Native Application Protection Platform) for IoT/Edge Security. This proactive approach aims to mitigate risks associated with AI-driven operations. Menlo Park, Calif., 25, 2025, CyberNewswire — AccuKnox, Inc.
IoT 100
100 
Insecure Medical Devices — Illumina DNA Sequencer Illuminates Risks
Security Boulevard
JANUARY 8, 2025
The post Insecure Medical Devices Illumina DNA Sequencer Illuminates Risks appeared first on Security Boulevard. IEI-IEI, Oh: Running an obsolete OS, on obsolete hardware, configured with obsolete settings.
Risk 125
125 
DDoS 2.0: IoT Sparks New DDoS Alert
The Hacker News
SEPTEMBER 15, 2023
The Internet of Things (IoT) is transforming efficiency in various sectors like healthcare and logistics but has also introduced new security risks, particularly IoT-driven DDoS attacks. What Is IoT? IoT (Internet of Things) refers to online, interconnected devices that collect and exchange
DDOS 142
142 
Benchmarks Q&A: What the finance sector’s new X9 PKI standard signals for other industries
The Last Watchdog
MAY 6, 2025
Related: Why crypto-agility is a must have Sinha While the web-based PKI systemgoverned by browsers and certificate authoritieshas served the public internet well, its limitations are becoming evident in tightly regulated, high-assurance environments like banking. LW: What about quantum risks? Is this part of the motivation?
Healthcare 147
147 
Top IoT Security Solutions of 2021
eSecurity Planet
NOVEMBER 19, 2021
IoT security is where endpoint detection and response ( EDR ) and enterprise mobility management ( EMM ) meet the challenges of a rapidly expanding edge computing infrastructure. As the enterprise attack surface grows, IoT is yet another attack vector organizations aren’t fully prepared to defend.
IoT 140
140 
Last Watchdog’s IoT and ‘zero trust’ coverage win MVP awards from Information Management Today
The Last Watchdog
DECEMBER 5, 2019
My primer on the going forward privacy and security implications of IoT — What Everyone Should Know About the Promise and Pitfalls of the Internet of Things — won second place in the contest’s IoT Security category. I’ve never done stories to win awards. So keep reading and sharing. And thanks for your support.
IoT 37
37 
Hacked Robot Vacuums Hurl Racial Slurs, Show IoT Devices Risks
SecureWorld News
OCTOBER 16, 2024
The flaw has exposed the widely distributed smart vacuums to manipulation by bad actors, raising concerns about the cybersecurity of internet-connected home devices. The breaches underscore the growing threat of vulnerabilities in IoT (Internet of Things) devices. The video is unnerving.
IoT 116
116 
Unfixed vulnerability in popular library puts IoT products at risk
Malwarebytes
MAY 4, 2022
Researchers have found a vulnerability in a popular C standard library in IoT products that could allow attackers to perform DNS poisoning attacks against a target device. In a typical home setup, there is: A modem provided by your Internet Service Provider (ISP) which is your connection to the outside world. Stay safe, everyone!
IoT 137
137 
RSAC Fireside Chat: X9 PKI emerges to help financial sector interoperate, get ready for ‘Q-Day’
The Last Watchdog
APRIL 24, 2025
Related: PKI and the IoT cloud One quiet but consequential development now taking root in the financial sector could prove pivotal: the emergence of a dedicated Public Key Infrastructure (PKI) framework, tailored to banks and payment networks, guided by the Accredited Standards Committee X9 (ASC X9), and being rolled out by DigiCert.
Banking 147
147 
Attacks Escalating Against Linux-Based IoT Devices
eSecurity Planet
JANUARY 20, 2022
Incidents of malware targeting Linux-based Internet of Things (IoT) devices jumped by more than a third in 2021, with three malware families the primary drivers behind the increase. Threats to Open Source, IoT. Also read: Top IoT Security Solutions for 2022. A Fast-Growing Attack Surface.
IoT 145
145 
The IoT Cybersecurity Act of 2020: Implications for Devices
eSecurity Planet
JANUARY 22, 2021
billion Internet of Things (IoT) devices. As more information about IoT device vulnerabilities is published, the pressure on industry and government authorities to enhance security standards might be reaching a tipping point. government, standards will not apply to the IoT market at-large. Implications for IoT devices.
IoT 145
145 
Smart Home Data Breach Exposes 2.7 Billion Records
ZoneAlarm
FEBRUARY 23, 2025
Mars Hydro, a Chinese company that makes IoT devices like LED lights and hydroponics equipment, recently suffered a massive data breach, exposing approximately 2.7 This breach has raised serious concerns about the security of internet-connected devices and the potential risks for consumers. billion records.
The Internet of Things Is Everywhere. Are You Secure?
Security Boulevard
MARCH 18, 2021
From smart homes that enable you to control your thermostat from a distance to sensors on oil rigs that help predict maintenance to autonomous vehicles to GPS sensors implanted in the horns of endangered black rhinos , the internet of things is all around you. With the increase in connected devices comes an increase in IoT attacks.
Internet 137
137 
Cybersecurity Snapshot: Tenable Highlights Risks of AI Use in the Cloud, as UK’s NCSC Offers Tips for Post-Quantum Cryptography Adoption
Security Boulevard
MARCH 21, 2025
Check out key findings and insights from the Tenable Cloud AI Risk Report 2025. And get the latest on open source software security; cyber scams; and IoT security. 1 - Tenable: Orgs using AI in the cloud face thorny cyber risks Using AI tools in cloud environments?
Risk 69
69 
Malvertising Campaign Targets IoT Devices: GeoEdge
eSecurity Planet
AUGUST 9, 2021
A malicious advertising campaign originating out of Eastern Europe and operating since at least mid-June is targeting Internet of Things (IoT) devices connected to home networks, according to executives with GeoEdge, which offers ad security and quality solutions to online and mobile advertisers. Malvertising is Evolving.
IoT 145
145 
New TCP/IP Vulnerabilities Expose IoT, OT Systems
eSecurity Planet
JANUARY 6, 2021
Forescout Research Labs last month released a 14-page white paper and a 47-page research report detailing 33 vulnerabilities affecting millions of Internet of Things (IoT), Operational Technology (OT), and IT devices. The four TCP/IP protocol layers are the link layer, internet layer , transport layer, and application layer.
IoT 141
141 
IoT Connected Devices Pose Significant Risk to Organizations
Security Boulevard
JULY 24, 2023
Security flaws in connected devices and the IoT are plaguing the digital landscape, impacting a broad range of industries. The post IoT Connected Devices Pose Significant Risk to Organizations appeared first on Security Boulevard.
IoT 98
98 
Surge in Malicious IoT Botnet Activity Raises Cybersecurity Concerns
SecureWorld News
JUNE 13, 2023
In a digital landscape increasingly dependent on interconnected devices, the rise in malicious Internet of Things (IoT) botnet activity is becoming a significant cause for concern. This tactic is commonly associated with a variety of IoT botnets, exploiting the lax security measures present in billions of IoT devices worldwide.
IoT 132
132 
Q&A: Here’s how Google’s labeling HTTP websites “Not Secure” will strengthen the Internet
The Last Watchdog
AUGUST 15, 2018
In a move to blanket the Internet with encrypted website traffic, Google is moving forward with its insistence that straggling website publishers adopt HTTPS Secure Sockets Layer (SSL). Related: How PKI can secure IoT. DigiCert supplies SSL/TLS certificates and other PKI solutions for securing web traffic and the Internet of Things.
Internet 203
203 
MY TAKE: Why IoT systems won’t be secure until each and every microservice is reliably authenticated
The Last Watchdog
MARCH 4, 2020
Wider use of Internet of Things systems that can make daily living safer, healthier and more convenient is on the immediate horizon. However, to fully capture the benefits of an IoT-centric economy, a cauldron of privacy and security concerns must first be quelled. Political leaders in the U.K. Can you frame where things stand?
IoT 157
157 
Ghost Ransomware a Persistent Global Threat to Critical Infrastructure
SecureWorld News
FEBRUARY 20, 2025
Persistent exploitation of legacy systems One of the most alarming aspects of Ghost ransomware is its focus on legacy IoT and OT environments. Organizations must work closely with their suppliers to ensure a long-term operations and risk mitigation plan." Develop and test ransomware response plans.
Ransomware 112
112 
Amazing Fast Crypto for IoT — US NIST Fingers ASCON
Security Boulevard
FEBRUARY 9, 2023
Implementing modern cryptography standards on tiny IoT devices is hard. The post Amazing Fast Crypto for IoT — US NIST Fingers ASCON appeared first on Security Boulevard. They’re underpowered, need to sip battery charge and something like AES is often overkill.
IoT 144
144 
Network Equipment, IoT Devices are Big Security Risks: Forescout
Security Boulevard
JUNE 11, 2024
IT systems – and this year networking equipment in particular – continue to pose the most security risk for organizations, but it is the vulnerable Internet of Things (IoT) devices that are quickly moving up the ladder, according to researchers with Forescout’s Verdere Labs researchers.
IoT 75
75 
Healthcare Cybersecurity Market Soars: Key Trends and Insights
SecureWorld News
MAY 2, 2025
Breaches can disrupt care delivery and put lives at risk, not to mention lead to hefty compliance fines. Healthcare executives are responding by viewing cybersecurity not just as an IT issue, but as a core business risk. The report highlights that this surge in security spending has even created a $3.2
Healthcare 101
101 
Attackers Exploit Flaw that Could Impact Millions of Routers, IoT Devices
eSecurity Planet
AUGUST 10, 2021
In a recent blog post , the researchers said the bad actors are looking to leverage a path traversal vulnerability that could affect millions of home routers and other Internet of Things (IoT) devices that use the same code base and are manufactured by at least 17 vendors. Tenable First to Disclose Flaw.
IoT 144
144 
GUEST ESSAY: As cyber risks rise in 2020, as they surely will, don’t overlook physical security
The Last Watchdog
DECEMBER 31, 2019
Related: Good to know about IoT Physical security is often a second thought when it comes to information security. The internet of things (IoT) is widening the sphere of physical security as smart devices connected to business systems via the internet may be located outside of established secure perimeters.
Cyber Risk 173
173 
CrowdStrike expands Falcon platform with XDR for IoT assets
CSO Magazine
APRIL 11, 2023
Cybersecurity vendor CrowdStrike has announced the release of new extended detection and response (XDR) capabilities within its Falcon platform to secure extended internet of things (XIoT) assets including IoT, Industrial IoT, OT, and medical devices. To read this article in full, please click here
IoT 105
105 
Story of the Year: global IT outages and supply chain attacks
SecureList
DECEMBER 9, 2024
This incident serves as a stark reminder of the critical risks posed by global IT disruptions and supply chain weaknesses. This case underscores the serious risk that social engineering and supply chain attacks pose to open-source projects. The issue serves as a reminder of the potential risks inherent in widely used software.
Internet 112
112 
Brits Ban Default Passwords — and More IoT Stupidity
Security Boulevard
APRIL 30, 2024
The post Brits Ban Default Passwords — and More IoT Stupidity appeared first on Security Boulevard. The UK’s Product Security and Telecommunications Infrastructure Act aims to improve the security of net-connected consumer gear.
IoT 135
135 
5G and IoT for Enhanced Connectivity in Utility Infrastructure: The Future Is Now or Maybe Tomorrow?
SecureWorld News
OCTOBER 3, 2024
Remember when we were all excited about dial-up internet? Fast forward to today, and and we're not just talking about high-speed internet. But what does 5G mean for utility IoT? Whether it's faster internet, cleaner energy, or world peace, you will see this character's name. Things have changed. Let's get started.
IoT 112
112 
Let's personalize your content