article thumbnail

Secure by Design: UK Enforces IoT Device Cybersecurity Rules

Data Breach Today

Law Bans Universal Default Passwords; Requires Bug-Reporting Channels, Update Plan Say goodbye to buying internet of things devices in Britain with a default or hardcoded password set to "12345," as the country has banned manufacturers from shipping internet-connected and network-connected devices that don't comply with minimum cybersecurity standards. (..)

article thumbnail

Hackers Target Wind Turbine Manufacturer Nordex

Data Breach Today

Company Initiates Complete Shutdown of IT Systems; Attack May Link to Viasat German wind turbine manufacturer Nordex, which develops, manufactures and distributes wind power systems across the world, has switched off its IT systems in multiple locations after a reported cybersecurity incident.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CISA, Others Unveil Guide for Secure Software Manufacturing

Data Breach Today

Joint Road Map Details How Manufacturers Should Bake Security Into Design Processes Cybersecurity authorities issued a road map Thursday detailing how software manufacturers should go about baking security into their design processes.

article thumbnail

European IoT Manufacturers Lag in Vulnerability Disclosure

Data Breach Today

Research Firm CEO Says IoT Makers Treat Cybersecurity as Somebody Else's Problem A review of internet of things manufacturers by Copper House shows that European companies fared the worst in having vulnerability disclosure policies.

article thumbnail

Medical Devices: Negotiating Cybersecurity Contract Terms

Data Breach Today

New guidance provides healthcare entities and medical device makers a jump-start for negotiating critical cybersecurity issues pertaining to procurement contracts, says Jim Jacobson of device manufacturer Siemens Healthineers, co-chair of an industry group that developed the contract template.

article thumbnail

Raising the Bar on Premarket Medical Device Cybersecurity

Data Breach Today

The Food and Drug Administration's decision to incorporate "quality systems regulations" into its new draft guidance for premarket medical device cybersecurity is an important development in the scope of the agency's expectations for manufacturers, says Dr. Suzanne Schwartz of the FDA.

article thumbnail

FDA Authorization Bill Drops Medical Device Cybersecurity

Data Breach Today

Congress Backs Away From Requiring Manufacturers to Patch Medical Devices A congressional deal will ensure the U.S. Food and Drug Administration can continue collecting fees from medical device manufacturers but at the price of dropping increased cybersecurity mandates for the industry.