Troy Hunt

NOVEMBER 28, 2020

More than 200,000 unique visitors dropped by this week, mostly to read about IoT things. I topped the week off by spending a couple of hours talking to Scott Helme about our respective IoT experiences so that's the entirety of this week's update - Scott and I talking IoT.

IoT 112

IoT Passwords Security IT 112

Troy Hunt

NOVEMBER 25, 2020

In part 1 of this series, I posited that the IoT landscape is an absolute mess but Home Assistant (HA) does an admirable job of tying it all together. As with the rest of the IoT landscape, there's a lot of scope for improvement here and also just like the other IoT posts, it gets very complex for normal people very quickly.

IoT 143

IoT Security Risk Cloud 143

Security Affairs

AUGUST 17, 2021

FireEye Mandiant researchers have discovered a critical vulnerability in the Kalay cloud platform that exposes millions of IoT devices to attacks. The flaw could be easily exploited by a remote attacker to take over an IoT device, the only info needed for the attack is the Kalay unique identifier (UID) of the targeted user.

IoT 111

IoT Cloud Libraries Access 111

Security Affairs

AUGUST 27, 2021

Researchers from Nozomi Networks discovered a critical vulnerability that can be exploited to hack a video surveillance product made by Annke. The vulnerability, tracked as CVE-2021-32941 can be exploited by an attacker to hack a video surveillance product made by Annke, a provider of home and business security solutions.

Cybersecurity 99

Cybersecurity IoT Access Manufacturing 99

Dark Reading

DECEMBER 27, 2018

Due to a shared Amazon S3 credential, all users of a certain model of the Guardzilla All-In-One Video Security System can view each other's videos.

IoT 83

IoT Access Security 83

Troy Hunt

NOVEMBER 25, 2020

The first few parts of this series have all been somewhat technical in nature; part 1 was how much of a mess the IoT ecosystem is and how Home Assistant aims to unify it all, part 2 got into the networking layer with both Wi-Fi and Zigbee and in part 3 , I delved into security. Now let's tackle something really tricky - humans.

IoT 136

IoT IT Marketing Access 136

Data Breach Today

FEBRUARY 5, 2021

Remote Attackers Could Spy on Audio, Video Certain Geeni doorbells and security cameras made by IoT company Merkury Innovations contain serious flaws. The flaws will be fixed this month, more than three months after the company was notified. Major retailers, including Walmart, Amazon and Home Depot, sell the devices.

Retail 222

Retail IoT Security 222

Data Breach Today

SEPTEMBER 27, 2021

Video Security Tech Firm Releases Firmware Update to Fix Vulnerability A security researcher who goes by the alias Watchful_IP has discovered a command injection vulnerability that could potentially affect millions of Hikvision's IoT devices.

IoT 157

IoT Security IT 157

Security Affairs

DECEMBER 29, 2018

A vulnerability in the Guardzilla home video surveillance system could be exploited by users to watch Guardzilla footage of other users. The Guardzilla All-In-One Video Security System is an indoor video surveillance solution. SecurityAffairs – Guardzilla, IoT). ” read a post published by 0dayallday.org.

Security 83

Security IoT Passwords Access 83

The Security Ledger

JUNE 29, 2023

The post Episode 251: Kry10 CEO Boyd Multerer on building a secure OS for the IoT appeared first on The Security Ledger with Paul F. Related Stories Episode 250: Window Snyder of Thistle on Making IoT Security Easy Forget the IoT. Video Podcast ] | [ MP3 ] | [ Transcript ] The Internet of Things is growing – and fast.

IoT 52

IoT Security Analytics Cybersecurity 52

Security Affairs

JULY 29, 2018

Security experts have discovered a security glitch in Swann IoT camera that could be exploited by attackers to access video feeds. The affected camera model it a battery-powered HD camera that implements video streaming feature either directly over the local network or via a cloud service. Pierluigi Paganini.

IoT 47

IoT Access Security Cloud 47

The Last Watchdog

AUGUST 27, 2018

Related video: How DDoS attacks leverage the Internet’s DNA. A nascent cottage industry is starting to gel around DDoS botnets-for-hire , comprised of millions of compromised IoT devices. IoT botnets can be hired to execute smaller-scaled DDoS attacks designed to knock out a networked application, rather than a whole website.

IoT 204

IoT Digital transformation Marketing Security 204

Threatpost

SEPTEMBER 26, 2019

Experts from Nokia, iboss and Sectigo talk 5G mobile security for internet of things (IoT) devices in this webinar YouTube video (transcript included).

IoT 78

IoT Security Cybersecurity 78

Security Affairs

MAY 23, 2021

A misconfiguration issue in the software used by the Eufy video camera exposed private information and video streams of customers. Chinese electronics vendor Anker has recently addressed a bug that mistakenly exposed private information and video streams of customers using its Eufy video cameras. Pierluigi Paganini.

Access 104

Access Security IT IoT 104

Threatpost

AUGUST 17, 2021

A remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek’s Kalay network, used in 83m devices.

IoT 123

IoT Cloud Security 123

Security Affairs

DECEMBER 21, 2018

2018 was the year of the Internet of Things (IoT), massive attacks and various botnets hit smart devices, These are 5 IoT Security Predictions for 2019. IoT Attacks in 2018. Do the increased attacks mean the industry is becoming accustomed to IoT cyber attacks? Three IoT Attack Avenues for 2019.

IoT 87

IoT Security Manufacturing Privacy 87

Security Affairs

MARCH 26, 2024

A new variant of TheMoon malware infected thousands of outdated small office and home office (SOHO) routers and IoT devices worldwide. The Black Lotus Labs team at Lumen Technologies uncovered an updated version of “ TheMoon ” bot targeting end-of-life (EoL) small home/small office (SOHO) routers and IoT devices.

IoT 117

IoT Authentication IT Security 117

Thales Cloud Protection & Licensing

MARCH 10, 2021

What’s driving the security of IoT? First off, connected vehicles and IoT devices are highly attractive targets to hackers. Unlike servers and devices running in enterprise networks, IoT devices are typically shipped direct to consumers, without any control over the network or environment they run in. Securing the IoT Stack.

IoT 77

IoT Security Manufacturing Encryption 77

Troy Hunt

JUNE 24, 2023

Couldn't record in my office due to a weird ground loop problem, my Home Assistant instance was unexpectedly rebooting, the Yale IoT door locks had near unprecedentedly bad UX. This feels like a week of minor frustrations with little real world consequence but they just bugged the hell out of me.

IoT 73

IoT Compliance IT 73

Security Affairs

AUGUST 6, 2019

The STRONTIUM Russia-linked APT group is compromising common IoT devices to gain access to several corporate networks. Researchers at Microsoft observed the Russia-linked APT group STRONTIUM abusing IoT devices to gain access to several corporate networks. ” IoT risk must be taken seriously. ” continues Microsoft.

IoT 73

IoT Military Access Education 73

Threatpost

NOVEMBER 1, 2018

Five of them allow remote compromise of the IoT gadgets, so attackers can intercept video feeds and more.

IoT 73

IoT Cloud Security 73

Threatpost

MAY 9, 2019

A video interview and Q&A with IoT specialist Dan Demeter of Kaspersky Lab.

IoT 71

IoT Security 71

Security Affairs

DECEMBER 27, 2019

Authorities in Thailand are investigating a cyber attack that resulted in the broadcast of surveillance video from inside a prison in the country’s south. The video was published on Tuesday by an account named “ BigBrother’s Gaze,” the images from several cameras showed prisoners’ operations.

IoT 67

IoT Security 67

Security Affairs

SEPTEMBER 10, 2019

A security researcher disclosed zero-day flaws in Telestar Digital GmbH IoT radio devices that could be exploited by remote attackers to hijack systems without any user interaction. Kunz and his colleagues were able to brute-force the IoT radio in just 10 minutes and achieve root access with full privileges. . Pierluigi Paganini.

IoT 84

IoT Manufacturing Passwords Access 84

Threatpost

AUGUST 14, 2018

Armis' CTO discusses the top IoT security issues in the marketplace today - and whether device manufacturers will start to prioritize security.

IoT 46

IoT Manufacturing Security 46

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT 52

IoT Communications Security IT 52

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. The next day I cut the string, There's a parallel here to IoT light bulbs that change colors. And what then are the tools and knowledge that you need to get started hacking IoT devices. Funny thing.

IoT 52

IoT Communications Security IT 52

Schneier on Security

MAY 1, 2018

Researchers at Princeton University have released IoT Inspector , a tool that analyzes the security and privacy of IoT devices by examining the data they send across the Internet. They've already used the tool to study a bunch of different IoT devices. Related: IoT Hall of Shame. Some examples include: Samsung Smart TV.

IoT 60

IoT Manufacturing Communications Encryption 60

Security Affairs

NOVEMBER 12, 2018

The author of an IoT botnet is distributing a backdoor script for ZTE routers that also includes his own backdoor to hack script kiddies. A weaponized IoT exploit script is being used by script kiddies, making use of a vendor backdoor account to hack the ZTE routers. Backdooring rival IoT botnet operator can have several purposes.

IoT 94

IoT Honeypots Security Access 94

Threatpost

FEBRUARY 27, 2020

From vacuum cleaners to baby monitors, the IoT landscape continues to be plagued by concerning security issues that lead to privacy threats.

IoT 81

IoT Privacy Security 81

Security Affairs

APRIL 15, 2024

Industrial and enterprise IoT cybersecurity firm Claroty reported that the Ukrainian Blackjack hacking group claims to have damaged emergency detection and response capabilities in Moscow and beyond the Russian capital using a destructive ICS malware dubbed Fuxnet. . YouTube Video 1 , YouTube Video 2 ).

IoT 117

IoT Access Communications Military 117

Security Affairs

DECEMBER 17, 2023

The Mirai-based botnet InfectedSlurs was spotted targeting QNAP VioStor NVR (Network Video Recorder) devices. In November, Akamai warned of a new Mirai -based DDoS botnet, named InfectedSlurs , actively exploiting two zero-day vulnerabilities to infect routers and video recorder (NVR) devices. and earlier (5.0.0

Honeypots 108

Honeypots IoT Communications Security 108

Security Affairs

OCTOBER 10, 2018

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature, a gift for APT groups and cyber crime syndicates. video streams that are viewed). This user seems to at least have permissions to access/view video streams.” ” reads the report published by SEC Consult. !However,

Cloud 81

Cloud Manufacturing Passwords IoT 81

Troy Hunt

FEBRUARY 16, 2023

Instead, I'm unboxing an armful of Insta360 goodies and lamenting the state of IoT whilst putting even more IoT things into our massive garage renovation. References The Ubiquiti AI Bullet camera with license plate recognition is. 🤦‍♂️) Trying to find an IoT door lock that does everything is.

IoT 80

IoT Cloud Access Security 80

Security Affairs

DECEMBER 4, 2018

Security experts from Trend Micro discovered that some machine-to-machine (M2M) protocols can be abused to attack IoT and industrial Internet of Things (IIoT) systems. attackers abuse M2M protocols to target IoT and IIoT devices. The post M2M protocols can be abused to attack IoT and IIoT systems appeared first on Security Affairs.

IoT 84

IoT Communications Security awareness Paper 84

Troy Hunt

DECEMBER 15, 2023

I'd say the balloon fetish segment was the highlight of this week's video. No, seriously, it's a moment of levity in an otherwise often serious industry. Secure your family with Aura the #1 rated proactive protection that helps keep you safe online. Get started.

IoT 93

IoT IT Security 93

The Security Ledger

DECEMBER 19, 2023

Security researcher and IoT hacker Dennis Giese talks about his mission to liberate robot vacuums from the control of their manufacturers, letting owners tinker with their own devices and - importantly - control the data they collect about our most intimate surroundings. Forget the IoT. Read the whole entry. »

IoT 75

IoT Manufacturing Personal data Privacy 75