eSecurity Planet

AUGUST 9, 2021

A malicious advertising campaign originating out of Eastern Europe and operating since at least mid-June is targeting Internet of Things (IoT) devices connected to home networks, according to executives with GeoEdge, which offers ad security and quality solutions to online and mobile advertisers. Malvertising is Evolving.

IoT 145

IoT Cloud Mining Marketing 145

Data Breach Today

FEBRUARY 5, 2021

Remote Attackers Could Spy on Audio, Video Certain Geeni doorbells and security cameras made by IoT company Merkury Innovations contain serious flaws. The flaws will be fixed this month, more than three months after the company was notified. Major retailers, including Walmart, Amazon and Home Depot, sell the devices.

Retail 201

Retail IoT Security 201

Troy Hunt

NOVEMBER 28, 2020

More than 200,000 unique visitors dropped by this week, mostly to read about IoT things. I topped the week off by spending a couple of hours talking to Scott Helme about our respective IoT experiences so that's the entirety of this week's update - Scott and I talking IoT.

IoT 113

IoT Passwords Security IT 113

The Security Ledger

JUNE 29, 2023

Host Paul Roberts speaks with Boyd Multerer, the CEO and founder of Kry10, which has made a secure OS for the Internet of Things. The post Episode 251: Kry10 CEO Boyd Multerer on building a secure OS for the IoT appeared first on The Security Ledger with Paul F. billion active IoT endpoints.

IoT 52

IoT Security Analytics Cybersecurity 52

Security Affairs

DECEMBER 29, 2018

A vulnerability in the Guardzilla home video surveillance system could be exploited by users to watch Guardzilla footage of other users. The Guardzilla All-In-One Video Security System is an indoor video surveillance solution. SecurityAffairs – Guardzilla, IoT). ” read a post published by 0dayallday.org.

Security 84

Security IoT Passwords Access 84

Security Affairs

AUGUST 17, 2021

FireEye Mandiant researchers have discovered a critical vulnerability in the Kalay cloud platform that exposes millions of IoT devices to attacks. The flaw could be easily exploited by a remote attacker to take over an IoT device, the only info needed for the attack is the Kalay unique identifier (UID) of the targeted user.

IoT 114

IoT Cloud Libraries Access 114

Security Affairs

AUGUST 27, 2021

Researchers from Nozomi Networks discovered a critical vulnerability that can be exploited to hack a video surveillance product made by Annke. The vulnerability, tracked as CVE-2021-32941 can be exploited by an attacker to hack a video surveillance product made by Annke, a provider of home and business security solutions.

Cybersecurity 100

Cybersecurity IoT Access Manufacturing 100

Security Affairs

DECEMBER 21, 2018

2018 was the year of the Internet of Things (IoT), massive attacks and various botnets hit smart devices, These are 5 IoT Security Predictions for 2019. IoT Attacks in 2018. Do the increased attacks mean the industry is becoming accustomed to IoT cyber attacks? Insights from VDOO’s leadership.

IoT 90

IoT Security Manufacturing Privacy 90

Threatpost

SEPTEMBER 26, 2019

Experts from Nokia, iboss and Sectigo talk 5G mobile security for internet of things (IoT) devices in this webinar YouTube video (transcript included).

IoT 78

IoT Security Cybersecurity 78

Security Affairs

JULY 29, 2018

Security experts have discovered a security glitch in Swann IoT camera that could be exploited by attackers to access video feeds. The affected camera model it a battery-powered HD camera that implements video streaming feature either directly over the local network or via a cloud service. Pierluigi Paganini.

IoT 49

IoT Access Security Cloud 49

Thales Cloud Protection & Licensing

MARCH 10, 2021

What’s driving the security of IoT? The Urgency for Security in a Connected World. It’s also enabling manufacturers to respond faster to security vulnerabilities, market demand, and even natural disasters. Device Security is Hard. Guest Blog: TalkingTrust. Thu, 03/11/2021 - 07:39. They're attractive targets.

IoT 77

IoT Security Manufacturing Encryption 77

Dark Reading

DECEMBER 27, 2018

Due to a shared Amazon S3 credential, all users of a certain model of the Guardzilla All-In-One Video Security System can view each other's videos.

IoT 83

IoT Access Security 83

Data Breach Today

SEPTEMBER 27, 2021

Video Security Tech Firm Releases Firmware Update to Fix Vulnerability A security researcher who goes by the alias Watchful_IP has discovered a command injection vulnerability that could potentially affect millions of Hikvision's IoT devices.

IoT 157

IoT Security IT 157

The Last Watchdog

AUGUST 27, 2018

Related video: How DDoS attacks leverage the Internet’s DNA. This is borne out by Akamai Technologies’ Summer 2018 Internet Security/Web Attack Report. A nascent cottage industry is starting to gel around DDoS botnets-for-hire , comprised of millions of compromised IoT devices. IoT force multiplier.

IoT 255

IoT Digital transformation Marketing Security 255

Security Affairs

MAY 23, 2021

A misconfiguration issue in the software used by the Eufy video camera exposed private information and video streams of customers. Chinese electronics vendor Anker has recently addressed a bug that mistakenly exposed private information and video streams of customers using its Eufy video cameras. Pierluigi Paganini.

Access 109

Access Security IT IoT 109

Troy Hunt

NOVEMBER 25, 2020

The first few parts of this series have all been somewhat technical in nature; part 1 was how much of a mess the IoT ecosystem is and how Home Assistant aims to unify it all, part 2 got into the networking layer with both Wi-Fi and Zigbee and in part 3 , I delved into security. Now let's tackle something really tricky - humans.

IoT 137

IoT IT Marketing Access 137

Threatpost

AUGUST 14, 2018

Armis' CTO discusses the top IoT security issues in the marketplace today - and whether device manufacturers will start to prioritize security.

IoT 46

IoT Manufacturing Security 46

Security Affairs

MARCH 26, 2024

A new variant of TheMoon malware infected thousands of outdated small office and home office (SOHO) routers and IoT devices worldwide. The Black Lotus Labs team at Lumen Technologies uncovered an updated version of “ TheMoon ” bot targeting end-of-life (EoL) small home/small office (SOHO) routers and IoT devices.

IoT 124

IoT Authentication IT Security 124

Security Affairs

AUGUST 6, 2019

The STRONTIUM Russia-linked APT group is compromising common IoT devices to gain access to several corporate networks. Researchers at Microsoft observed the Russia-linked APT group STRONTIUM abusing IoT devices to gain access to several corporate networks. ” IoT risk must be taken seriously. ” continues Microsoft.

IoT 75

IoT Military Access Education 75

Security Affairs

DECEMBER 27, 2019

Authorities in Thailand are investigating a cyber attack that resulted in the broadcast of surveillance video from inside a prison in the country’s south. The video was published on Tuesday by an account named “ BigBrother’s Gaze,” the images from several cameras showed prisoners’ operations.

IoT 69

IoT Security 69

Security Affairs

SEPTEMBER 10, 2019

A security researcher disclosed zero-day flaws in Telestar Digital GmbH IoT radio devices that could be exploited by remote attackers to hijack systems without any user interaction. Kunz and his colleagues were able to brute-force the IoT radio in just 10 minutes and achieve root access with full privileges. .

IoT 85

IoT Manufacturing Passwords Access 85

Security Affairs

DECEMBER 17, 2023

The Mirai-based botnet InfectedSlurs was spotted targeting QNAP VioStor NVR (Network Video Recorder) devices. In November, Akamai warned of a new Mirai -based DDoS botnet, named InfectedSlurs , actively exploiting two zero-day vulnerabilities to infect routers and video recorder (NVR) devices. and earlier. and earlier (5.0.0

Honeypots 115

Honeypots IoT Communications Security 115

Threatpost

AUGUST 17, 2021

A remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek’s Kalay network, used in 83m devices.

IoT 123

IoT Cloud Security 123

Schneier on Security

DECEMBER 19, 2019

Forescout found that their security is terrible: In total, our researchers discovered five vulnerabilities of four different kinds: Data exposure: PDF files of shared whiteboards (e.g. These are stupid design decisions made by engineers who had no idea how to create a secure system. meeting notes) and other sensitive files (e.g.,

IoT 66

IoT Security Systems administration Encryption 66

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. Vamosi: I once lived near a large urban park. Funny thing.

IoT 52

IoT Communications Security IT 52

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. Vamosi: I once lived near a large urban park. Funny thing.

IoT 52

IoT Communications Security IT 52

Security Affairs

NOVEMBER 12, 2018

The author of an IoT botnet is distributing a backdoor script for ZTE routers that also includes his own backdoor to hack script kiddies. A weaponized IoT exploit script is being used by script kiddies, making use of a vendor backdoor account to hack the ZTE routers. Backdooring rival IoT botnet operator can have several purposes.

IoT 96

IoT Honeypots Security Access 96

Threatpost

FEBRUARY 27, 2020

From vacuum cleaners to baby monitors, the IoT landscape continues to be plagued by concerning security issues that lead to privacy threats.

IoT 81

IoT Privacy Security 81

Security Affairs

APRIL 15, 2024

Industrial and enterprise IoT cybersecurity firm Claroty reported that the Ukrainian Blackjack hacking group claims to have damaged emergency detection and response capabilities in Moscow and beyond the Russian capital using a destructive ICS malware dubbed Fuxnet. . YouTube Video 1 , YouTube Video 2 ).

IoT 126

IoT Access Communications Military 126

Schneier on Security

MAY 1, 2018

Researchers at Princeton University have released IoT Inspector , a tool that analyzes the security and privacy of IoT devices by examining the data they send across the Internet. They've already used the tool to study a bunch of different IoT devices. Amcrest WiFi Security Camera. Related: IoT Hall of Shame.

IoT 63

IoT Manufacturing Communications Encryption 63

The Security Ledger

DECEMBER 19, 2023

Security researcher and IoT hacker Dennis Giese talks about his mission to liberate robot vacuums from the control of their manufacturers, letting owners tinker with their own devices and - importantly - control the data they collect about our most intimate surroundings. Forget the IoT. Read the whole entry. »

IoT 75

IoT Manufacturing Personal data Privacy 75

Schneier on Security

NOVEMBER 7, 2018

Consumer Reports is starting to evaluate the security of IoT devices. As part of that, it's reviewing wireless home-security cameras. It found significant security vulnerabilities in D-Link cameras: In contrast, D-Link doesn't store video from the DCS-2630L in the cloud. Boing Boing link.

Security 85

Security IoT Manufacturing Encryption 85

Troy Hunt

FEBRUARY 16, 2023

It's literally a "cyber-free" week, as least far as the term relates to security things. Instead, I'm unboxing an armful of Insta360 goodies and lamenting the state of IoT whilst putting even more IoT things into our massive garage renovation. I'm enjoying it though. Book a demo today.

IoT 81

IoT Cloud Access Security 81

Krebs on Security

JANUARY 11, 2021

Ubiquiti , a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. Click on ‘Security’ from the left-hand menu. Enable 2FA.

Passwords 337

Passwords Authentication Cloud IoT 337

Threatpost

NOVEMBER 1, 2018

Five of them allow remote compromise of the IoT gadgets, so attackers can intercept video feeds and more.

IoT 73

IoT Cloud Security 73

Threatpost

MAY 9, 2019

A video interview and Q&A with IoT specialist Dan Demeter of Kaspersky Lab.

IoT 71

IoT Security 71

Security Affairs

OCTOBER 10, 2018

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature, a gift for APT groups and cyber crime syndicates. Millions of devices are affected by security vulnerabilities that can be easily exploited by a remote attacker to take over devices. video streams that are viewed). Who controls these servers?

Cloud 83

Cloud Manufacturing Passwords IoT 83