Security Boulevard

APRIL 5, 2024

The post FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair? appeared first on Security Boulevard. Fast enough for government work: The Federal Communications Commission is finally minded to do something about decades-old vulnerabilities.

Government 128

Government Digital transformation Social Engineering Telecommunications 128

Security Boulevard

FEBRUARY 7, 2024

The post ‘Total Bollocks’ — No, Your Toothbrush isn’t DDoS’ing appeared first on Security Boulevard. PR FAIL: Were 3 million toothbrushes hacked into a botnet? Or does a Fortinet spokeschild have egg on his face?

Hacking 142

Hacking Social Engineering DDOS Internet 142

Security Boulevard

FEBRUARY 22, 2024

The post PRC State Hacking: ‘Chinese Edward Snowden’ Spills I‑Soon Secrets in Huge Dump of TTPs appeared first on Security Boulevard. Underpaid, overworked and angry: Whistleblower in hacker contractor firm for Chinese government blows lid off tactics, techniques and procedures.

Hacking 136

Hacking Government Digital transformation Social Engineering 136

Security Boulevard

FEBRUARY 8, 2024

Bootkit Bug in shim.efi appeared first on Security Boulevard. Snow joke: A Microsoft researcher found it—and it’s somehow Microsoft’s fault. The post Linux Vendors Squawk: PATCH NOW — CVSS 9.8

Social Engineering 131

Social Engineering Data privacy Engineering IoT 131

Security Boulevard

APRIL 3, 2023

appeared first on Security Boulevard. Déjà Vu: Hack of WD systems leads to My Cloud service outage. Owners unable to access files. The post Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!)

Hacking 145

Hacking Social Engineering IoT Security Awareness 145

Security Boulevard

APRIL 7, 2023

The post Tesla Staff Shared Saucy Snaps of Customers (Sources Say) appeared first on Security Boulevard. I guess I’m banned from Twitter now: Tesla employees mocked and memeified private photos and videos. Firm’s message boards were full of the stuff.

Social Engineering 141

Social Engineering IoT Security Awareness Engineering 141

Security Boulevard

APRIL 10, 2023

The post Yes, You CAN Steal This Car — by Opening the Fender appeared first on Security Boulevard. CAN You Not? Toyota RAV4 and many others vulnerable to CAN bus injection attack. Cars need zero-trust too.

IoT 138

IoT Security Awareness Mobile Malware 138

Security Boulevard

JANUARY 9, 2023

But some vendors faced stiff criticism over their privacy and security stances. The post CES 2023 FAIL: Worst in Show for Security and Privacy appeared first on Security Boulevard. The Consumer Electronics Show wrapped up yesterday.

Social Engineering 141

Social Engineering IoT Security Awareness Engineering 141

Security Boulevard

DECEMBER 20, 2023

The post SSH FAIL: Terrapin Attack Smashes ‘Secure’ Shell Spec appeared first on Security Boulevard. Testy Testudine: Lurking vuln in SSH spec means EVERY implementation must build patches.

Digital transformation 86

Digital transformation Social Engineering Data privacy Authentication 86

Security Boulevard

FEBRUARY 3, 2023

The post Anker’s Eufy Admits ‘Lie’ After TWO Months — Still no Apology appeared first on Security Boulevard. Anker said its Eufy cameras never send unencrypted video. But a couple of months ago, researchers discovered they did. Despite the clear evidence, Anker denied, delayed and deflected.

IoT 120

IoT Encryption Internet Internet 120

Security Boulevard

JULY 28, 2023

The post Android Foils AirTag Stalkers and Thieves — While Apple Does Nothing appeared first on Security Boulevard. C’mon Cupertino: “Unknown Tracker Detected,” your phone screams.

Social Engineering 98

Social Engineering IoT Security Awareness Engineering 98

Security Boulevard

JANUARY 2, 2024

appeared first on Security Boulevard. Déjà Vu: Hack of WD systems leads to My Cloud service outage. Owners unable to access files. The post Best of 2023: Western Digital Hacked: ‘My Cloud’ Data Dead (Even Local Storage!)

Hacking 78

Hacking Social Engineering IoT Security Awareness 78

Security Boulevard

JUNE 14, 2023

The post Your Personal Data Sold to US Intelligence Agencies appeared first on Security Boulevard. What Price 4th Amendment? Warrant not needed if info bought from brokers.

Social Engineering 104

Social Engineering IoT Security Awareness Engineering 104

Security Boulevard

NOVEMBER 22, 2023

The post ‘LitterDrifter’ Russian USB Worm Leaks from Ukraine War Zone appeared first on Security Boulevard. FSB APT USB VBS LNK DLL: WTH? Flash drive sharing malware escapes Україна. Gamaredon fingered as perps.

Malware 80

Malware Social Engineering Data privacy Engineering 80

Security Boulevard

OCTOBER 28, 2022

The post OpenSSL ‘CRITICAL’ Bug — Sky Falling — Patch Hits 11/1 appeared first on Security Boulevard. OpenSSL has a new ‘critical’ bug. But it’s a secret until next month.

Social Engineering 140

Social Engineering Security Awareness Engineering IoT 140

Security Boulevard

DECEMBER 2, 2022

Eufy home security cameras and doorbells are insecure: They send your photos to the cloud without permission and serve up video across the internet without encryption. The post More Lies: Anker’s Eufy Pants on Fire — ‘No Cloud’ Cams Send to Cloud appeared first on Security Boulevard.

Internet 120

Internet Internet Encryption Social Engineering 120

Security Boulevard

NOVEMBER 20, 2023

The post FCC’s Got New Rules for SIM-Swap and Port-Out Fraud appeared first on Security Boulevard. Too many times: Federal Communications Commission shuts stable door after horse bolted. But chairwoman Jessica Rosenworcel (pictured) was hoping it would save us.

Social Engineering 76

Social Engineering Authentication Scams Data privacy 76

Security Boulevard

JULY 21, 2022

The post MiCODUS Car Trackers are SUPER Vulnerable and Dangerous appeared first on Security Boulevard. An add-on vehicle tracker is incredibly insecure—to the point it’s dangerous to use. The MV720 and other products sold by MiCODUS are full of easily exploited bugs.

Social Engineering 125

Social Engineering IoT Passwords Security Awareness 125

Security Boulevard

MAY 19, 2022

The post ‘Incompetent’ Tesla Lets Hackers Steal Cars — via Bluetooth appeared first on Security Boulevard. Tesla cars can be unlocked and stolen via a simple relay attack. The company shrugged and said it’s “a known limitation.”.

Social Engineering 135

Social Engineering IoT Security Awareness Engineering 135

Security Boulevard

NOVEMBER 28, 2022

and UK Ban More Chinese Kit as Xi’s Grip Weakens appeared first on Security Boulevard. Two key members of the Five Eyes intelligence alliance have made further moves to stop Chinese equipment imports. The post U.S.

Digital transformation 130

Digital transformation CISO Security Awareness IoT 130

Security Boulevard

OCTOBER 13, 2023

The post Stalking: Fear of Apple AirTag ‘Explodes’ — Lawsuit Momentum Grows appeared first on Security Boulevard. This is why we can’t have nice things: 38 victims of Apple’s “negligence” named in amended class action.

Social Engineering 78

Social Engineering Data privacy Engineering IoT 78

Security Boulevard

JULY 26, 2023

The post ALERT: Google Wants to DRM your OS for ‘Web Environment Integrity’ appeared first on Security Boulevard. We will kill WEI: A thinly veiled attempt to track you and make more ad money.

Security Awareness 98

Security Awareness IoT Risk Mobile 98

Security Boulevard

JUNE 10, 2022

The post Tesla Fails Yet Again: Hackers can Steal Cars via NFC appeared first on Security Boulevard. Tesla Models 3 and Y can be unlocked and stolen via a bug in their NFC software. Two separate research groups found this new bug at around the same time.

Software 141

Software Social Engineering Security Awareness Engineering 141

Security Boulevard

JUNE 26, 2023

The post GDPR FAIL: US Firm ‘Profiles Half the World’ — it’s Max Schrems Again appeared first on Security Boulevard. NYOB accuses TeleSign, Proximus and BICS of misusing phone users’ private data. Reputation scoring = privacy violation?

Data privacy 98

Data privacy Security Awareness IoT Risk 98

Security Boulevard

NOVEMBER 11, 2022

The post NSA’s Plea: Stop Using C and C++ (Because You’re Idiots) appeared first on Security Boulevard. The C and C++ languages are unsafe. Instead, the NSA would like devs to use memory-safe languages—such as Rust.

CISO 123

CISO Security Awareness IoT Risk 123

Security Boulevard

NOVEMBER 4, 2022

The post Red Cross Wants Shielding from Hacks via Digital Emblem appeared first on Security Boulevard. The International Committee of the Red Cross (ICRC) is proposing a digital version of its eponymous logo.

Hacking 117

Hacking Social Engineering Security Awareness Engineering 117

Security Boulevard

OCTOBER 31, 2022

The post Chinese Tech: Banned in DC, but not in the States appeared first on Security Boulevard. There’s a massive loophole in the federal ban on Chinese technology from sus firms such as Huawei and ZTE: It doesn’t stop states from buying it.

Technology 117

Technology Social Engineering CISO Security Awareness 117

Security Boulevard

APRIL 25, 2022

The post ‘Crypto Bug of the Year’ Fixed — Update Java NOW appeared first on Security Boulevard. A ridiculously dumb flaw in Java’s signature checking code is patched. This isn’t some crufty legacy Sun code, but actual garbage Oracle sloppiness that’s causing IT people to chase their tails yet again.

Security Awareness 134

Security Awareness IoT Risk Mobile 134

Security Boulevard

MAY 9, 2022

The post Putin’s ‘Victory Parade’ TV Show Hacked: ‘Blood on Your Hands’ appeared first on Security Boulevard. Ukrainian hackers and their friends continue to pummel Russian computers. Hundreds of millions of documents” are being leaked. And today, Putin’s famous Victory Parade has been marred by hackers.

Hacking 127

Hacking Social Engineering Security Awareness Engineering 127

Security Boulevard

JULY 21, 2023

The post R.I.P. Kevin Mitnick, 1963–2023 appeared first on Security Boulevard. Kevin is Free: Hackers’ hacker dies, aged 59.

Social Engineering 98

Social Engineering Marketing Security Awareness Engineering 98

Security Boulevard

SEPTEMBER 27, 2022

The post Alleged Russian RSOCKS Hacker: ‘Send Me to US’ appeared first on Security Boulevard. The supposed owner of RSOCKS—a huge illegal botnet—wants to be extradited to the U.S. He claims to have info authorities here will want to hear.

Social Engineering 98

Social Engineering IoT Security Awareness Engineering 98

Security Boulevard

SEPTEMBER 7, 2021

The post Alexa, OK Google, Siri—Sued for Spying appeared first on Security Boulevard. Amazon, Apple and Google will have their days in court, charged with listening to your conversations when you least expect it.

Social Engineering 142

Social Engineering Security Awareness Engineering IoT 142

Security Boulevard

AUGUST 26, 2021

The post Your ISP is Selling your Data—Despite Swearing Not To appeared first on Security Boulevard. “Netflow Data” is big business. It’s being traded by brokers, with zero transparency. But didn’t ISPs promise not to sell it?

VPN 140

VPN Security Awareness IoT Risk 140

Security Boulevard

MARCH 21, 2022

The post Bad Dog—Everyone HATES This FIDO Passwordless Idea appeared first on Security Boulevard. The next steps to passwordless nirvana. But will FIDO2-WebAuthn let “privacy invading megacorps” profit from your private data?

Social Engineering 123

Social Engineering Authentication Security Awareness Engineering 123

Security Boulevard

MAY 16, 2022

The Open Source Security Foundation and Linux Foundation have a plan to fix our broken software supply chains. The post Do You Want Secure Supply Chains? SHOW ME THE MONEY appeared first on Security Boulevard. Benjamins needed.

Software 98

Software Social Engineering CISO IoT 98

Security Boulevard

FEBRUARY 22, 2022

The post Puttin’ Putin on Notice—We Will Hack Russia Back appeared first on Security Boulevard. If Russia launches cyberattacks on the U.S. or on NATO allies, it risks being hacked back. This warning comes from Deputy Attorney General Lisa O.

Hacking 117

Hacking Risk Social Engineering Security Awareness 117

Security Boulevard

OCTOBER 14, 2022

The post Linux Fixes 5 Gaping Holes in Wi-Fi appeared first on Security Boulevard. Linux’s Wi-Fi code has some *nasty* bugs, which can be exploited simply by being near an attacker. They’re caused by our old friend: Memory-unsafe C code.

Firewall 98

Firewall Security Awareness IoT Risk 98