article thumbnail

Cybersecurity Labeling of IoT Devices: Will It Happen in 2023?

SecureWorld News

consumers could have a set of cybersecurity labeling standards to protect their Internet of Things (IoT) devices as early as spring 2023 if the White House National Security Council has its way. National Institute of Standards and Technology (NIST) issued a whitepaper with recommendations for cybersecurity labeling for consumer IoT products.

IoT 78
article thumbnail

Thousands of Hikvision video cameras remain unpatched and vulnerable to takeover

Malwarebytes

However, according to a whitepaper published by CYFIRMA , tens of thousands of systems used by 2,300 organizations across 100 countries have still not applied the security update, and are therefore vulnerable to exploitation. In September 2021 we told you about insecure Hikvision security cameras that were ready to be taken over remotely.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Oldsmar’s Cyber Attack Raises the Alarm for the Water Industry

Cisco Security

Someone on the Internet successfully accessed the computer controlling the chemicals used to treat drinking water for the city and changed the level of sodium hydroxide to 11,100 parts per million (ppm), a significant increase from the normal amount of 100 ppm. How did this industrial workstation become accessible from the Internet?

article thumbnail

Thomson Reuters collected and leaked at least 3TB of sensitive data

Security Affairs

Thomson Reuters, a multinational media conglomerate, left an open database with sensitive customer and corporate data, including third-party server passwords in plaintext format. This instance left sensitive data open and was already indexed via popular IoT [internet of things] search engines. Original post at [link].

IoT 116
article thumbnail

NEW TECH: This free tool can help gauge, manage third-party cyber risk; it’s called ‘VRMMM’

The Last Watchdog

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

article thumbnail

What is Digital Identity, and why is it important?

CyberSecurity Insiders

The same is also true for machines which speak to other machines as part of the Internet of Things (IoT). The use of passwords, for example, in isolation, no longer meets the needs of a society that relies so heavily on being online – given they are a relatively weak form of authentication.

Mobile 98
article thumbnail

Top 5 Industries Most Vulnerable to Data Breaches in 2023

Security Boulevard

Lack of access to security features, such as passwords for admins, may result in a data breach where unauthorized persons within the organization may access sensitive data and leak it to malicious insiders. Yahoo also recorded a breach that affected 1 billion accounts in 2013, where names and passwords were stolen.