article thumbnail

The UK Bans Default Passwords

Schneier on Security

The UK is the first country to ban default passwords on IoT devices. On Monday, the United Kingdom became the first country in the world to ban default guessable usernames and passwords from these IoT devices. Unique passwords installed by default are still permitted. This sort of thing benefits all of us everywhere.

Passwords 263
article thumbnail

CISA urges tech manufacturers to stop using default passwords

Bleeping Computer

Cybersecurity and Infrastructure Security Agency (CISA) urged technology manufacturers to stop providing software and devices with default passwords. [.] Today, the U.S.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

NCSC: New UK law bans default passwords on smart devices

Security Affairs

The UK National Cyber Security Centre (NCSC) orders smart device manufacturers to ban default passwords starting from April 29, 2024. National Cyber Security Centre (NCSC) is urging manufacturers of smart devices to comply with new legislation that bans default passwords. ” reads the announcement published by NCSC.

Passwords 108
article thumbnail

CISA Urges Manufacturers Eliminate Default Passwords to Thwart Cyber Threats

The Hacker News

Cybersecurity and Infrastructure Security Agency (CISA) is urging manufacturers to get rid of default passwords on internet-exposed systems altogether, citing severe risks that could be exploited by malicious actors to gain initial access to, and move laterally within, organizations.

article thumbnail

New U.K. Law Bans Default Passwords on Smart Devices Starting April 2024

The Hacker News

National Cyber Security Centre (NCSC) is calling on manufacturers of smart devices to comply with new legislation that prohibits them from using default passwords, effective April 29, 2024.

Passwords 114
article thumbnail

Advice for manufacturers on the coming PSTI regulation

Pen Test Partners

This is a pivotal moment for manufacturers, importers, and distributors, imposing new compliance measures to safeguard against cyber threats. Implications for manufacturers and vendors This regulatory overhaul extends its reach to the core economic actors in the product lifecycle; manufacturers, importers, and distributors of smart products.

article thumbnail

Mollitiam Industries is the Newest Cyberweapons Arms Manufacturer

Schneier on Security

Its spyware is also said to be equipped with a keylogger, which means every keystroke made on an infected device — including passwords, search queries and messages sent via encrypted messaging apps — can be tracked and monitored.