Data Breach Today

MAY 30, 2022

Shankar Karthikason on How to Stem the Growing Cyberthreat to Manufacturing Manufacturing is a huge industry with massive amounts of critical data and IoT surfaces, and it is also a lucrative target for cybercriminals.

Manufacturing 261

Manufacturing Security IoT Cybersecurity 261

Data Breach Today

APRIL 29, 2024

Law Bans Universal Default Passwords; Requires Bug-Reporting Channels, Update Plan Say goodbye to buying internet of things devices in Britain with a default or hardcoded password set to "12345," as the country has banned manufacturers from shipping internet-connected and network-connected devices that don't comply with minimum cybersecurity standards. (..)

Cybersecurity 306

Cybersecurity IoT Manufacturing Passwords 306

Data Breach Today

JANUARY 24, 2024

federal networks after a government watchdog caught the government's main acquisition arm purchasing unauthorized, Chinese-manufactured video conference cameras. Experts Warn Against Increasing Federal Reliance on Chinese Technology Experts are raising fresh concerns about the "significant risk" for Chinese espionage against U.S.

Manufacturing 301

Manufacturing Security Government Risk 301

Data Breach Today

AUGUST 26, 2019

Vendors Issued Security Updates to Fix Severe Flaws Several Months Ago Patch or perish redux: Hackers are unleashing automated attacks to find and exploit known flaws in SSL VPNs manufactured by Fortinet and Pulse Secure to steal passwords.

Security 271

Security Manufacturing Passwords 271

Data Breach Today

NOVEMBER 27, 2024

Today, it extends far beyond these traditional domains, becoming essential in fields like manufacturing, agriculture, healthcare, transportation, robotics and space exploration.

IoT 266

IoT Agriculture Manufacturing Security 266

Krebs on Security

OCTOBER 28, 2020

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. Acting on a tip from Milwaukee, Wis.-based

Security 361

Security Ransomware Agriculture Cybersecurity 361

Data Breach Today

SEPTEMBER 14, 2023

China Cites Apple Security Flaws in Warning to Foreign Mobile Device Manufacturers China hasn't ordered any restrictions on the use of Apple iPhones by government agencies, according to a Chinese government spokesperson, but the official cited recent security flaws in the iPhone and warned that foreign mobile device manufacturers must abide by domestic (..)

Government 299

Government Manufacturing Information Security Security 299

Data Breach Today

JULY 26, 2024

UEFI Developer Leaked a Secure Boot Asymmetric Key Hundreds of laptop and server models from mainstream manufacturers are at risk of hacking that bypasses protections meant to ensure only trusted software can load during computer bootup, warn researchers from California supply chain startup Binarly.

Manufacturing 320

Manufacturing Risk Security 320

Data Breach Today

JUNE 22, 2020

But there are no regulations around how long manufacturers must provide security updates, which could mean a smart device could become a risk. Survey Shows Long-Term Software Support Varies Widely If you've managed to equip your home with smart devices and appliances that work properly, you probably think you're all set.

Manufacturing 232

Manufacturing Security Risk 232

Data Breach Today

SEPTEMBER 23, 2024

Commerce Department Moves to Regulate Foreign Vehicle Tech Amid Security Fears The White House is proposing new regulations on connected vehicles that would prohibit manufacturers from importing software or hardware from the People's Republic of China and Russia, citing an ever-increasing threat landscape and heightened national security risks.

Manufacturing 306

Manufacturing Risk Security 306

Data Breach Today

AUGUST 9, 2021

John Deere, Researchers Spar Over Impact of Vulnerabilities Flaws uncovered in tractor manufacturer John Deere's systems underscore the cyber risks that come in tandem with the productivity gains from high-tech farming.

Agriculture 354

Agriculture Risk Manufacturing Security 354

Data Breach Today

JUNE 30, 2021

Company Advises Users to Maintain Proper Security Policies as It Prepares Hotfix Taiwanese networking device manufacturer Zyxel is notifying customers about an ongoing series of attacks on some of its enterprise firewall and VPN products and is advising users to maintain proper remote access security policies as it prepares a hotfix.

IT 330

IT Manufacturing Access Security 330

The Last Watchdog

NOVEMBER 12, 2023

However, there’s still a long way to go to achieve deep interoperability of interconnected services in a way that preserves privacy and is very secure. This is precisely what the consortium of software companies and device manufacturers, led Google, Amazon and Apple, set out to achieve when Matter was conceived four years ago.

Security 276

Security Manufacturing Authentication Marketing 276

Data Breach Today

JULY 7, 2021

LafargeHolcim's Manish Dave on Building a Framework Manish Dave, head of IT security and compliance at LafargeHolcim, a multinational company that manufactures building materials, describes two ways to implement the "zero trust" model: User-to-application and workload-to-workload segmentation.

Manufacturing 331

Manufacturing Compliance Security IT 331

Data Breach Today

JUNE 23, 2022

Device manufacturer Hillrom Medical has released a patch and coordinated disclosure with CISA. Vulnerabilities Contained in Certain Hillrom Medical Electrocardiographs A popular line of portable electrocardiographs contains vulnerabilities that allow hackers to execute commands and access sensitive information, federal authorities warn.

Manufacturing 246

Manufacturing Security Access 246

Data Breach Today

DECEMBER 20, 2024

Heap Overflow Flaw Threatens Industrial Control Systems Globally Siemens issued a security advisory for a vulnerability affecting industrial control systems in its User Management Component that could enable attackers to execute arbitrary code. The heap-based buffer overflow flaw impacts products used in manufacturing and the energy sector.

Manufacturing 264

Manufacturing Security IT 264

Data Breach Today

MAY 14, 2020

Connected Devices Could Allow Attackers to Target Industrial Systems, Trend Micro Reports The increasing use of internet-connected devices in manufacturing facilities is opening up new ways for hackers to target so-called "smart" factories with unconventional attack methods, according to an analysis by security firm Trend Micro and the Polytechnic (..)

Manufacturing 333

Manufacturing Security 333

Security Affairs

SEPTEMBER 9, 2024

Trend Micro spotted an allegedly China-linked threat actor, tracked TIDRONE, targeting drone manufacturers in Taiwan. The attacks were detected in Taiwan and mostly targeted military-related industries, specifically the manufacturer of drones. “we investigated TIDRONE , a threat actor linked to Chinese-speaking groups.

Manufacturing 136

Manufacturing Military Communications Access 136

Data Breach Today

DECEMBER 24, 2020

Kaspersky: North Korean APT Group Used Malware in Attempt to Steal Information The Lazarus Group, a North Korean advanced persistent threat gang, apparently recently targeted a national ministry of health and a drug manufacturer involved in developing a COVID-19 vaccine in an attempt to steal information, according to the security firm Kaspersky.

Manufacturing 331

Manufacturing Security 331

Data Breach Today

AUGUST 19, 2022

The extremely diverse architectures and systems within the tens of thousands of very specialized types of medical devices used in clinical settings adds to the complexity healthcare organizations and manufacturers face in managing cybersecurity risk for these products, says Phil Englert of H-ISAC.

Risk 245

Risk Manufacturing Security Cybersecurity 245

Data Breach Today

OCTOBER 28, 2020

Security Experts Outline Their Concerns So far, much of the discussion about 5G security has focused on avoiding the use of technology from Chinese manufacturers, including Huawei and ZTE.

Security 197

Security Manufacturing Marketing 197

Data Breach Today

APRIL 15, 2024

Company Released a Hotfix to the Command Injection Vulnerability Firewall appliance manufacturer Palo Alto Networks rushed out a hotfix Friday to a command injection vulnerability present in its custom operating system after security researchers spotted a campaign to exploit the zero-day starting in March, likely from a state-backed threat actor.

Manufacturing 295

Manufacturing Security IT 295

Data Breach Today

DECEMBER 6, 2023

CISA, NSA, FBI and Global Partners Urge Manufacturers to Make Memory Safe Road Maps The U.S.

Manufacturing 298

Manufacturing Cybersecurity Security 298

Data Breach Today

JANUARY 18, 2021

Fraudsters Impersonate Vaccine Manufacturers, WHO, DHL Researchers at the security firm Proofpoint are tracking several fraud schemes leveraging COVID-19 vaccine-themed emails. The schemes include business email compromise scams, messages with malicious attachments and phishing emails designed to harvest credentials.

Manufacturing 303

Manufacturing Phishing Security 303

Data Breach Today

DECEMBER 12, 2023

North Korean Hackers Deploy Novel Malware Families North Korean hacking group Lazarus Group is exploiting Log4Shell to target manufacturing, agriculture and physical security sectors, resulting in the deployment of a tailored implant on compromised systems. The attack campaign targeted publicly accessible VMware Horizon servers.

Agriculture 298

Agriculture Manufacturing Access Security 298

Data Breach Today

JUNE 19, 2020

DHS Warns of Security Issues in Devices from Baxter, BD and Biotronik Federal authorities are sounding the alarm about cybersecurity vulnerabilities in six medical devices from three manufacturers. The device makers are providing risk mitigation advice.

Manufacturing 290

Manufacturing Cybersecurity Risk Security 290

The Last Watchdog

JULY 1, 2024

The coalescing of the next-gen security platforms that will carry us forward continues. Last Watchdog engaged Davinder Singh , Chief Technology Officer at Adaptiva, to drill down on the current state of securing networks. Here’s that exchange, edited for clarity and length. LW: What’s an example that illustrates the benefit of teaming?

IT 278

IT Security Compliance Manufacturing 278

Data Breach Today

OCTOBER 14, 2022

Security flaws in a vital signs monitoring device from a China-based manufacturer could allow hackers to launch an attack that spreads to all other devices connected to the same network. This is among the most serious security issues involving medical devices, says Jason Sinchak of Level Nine.

Security 182

Security Manufacturing 182

Security Affairs

SEPTEMBER 24, 2023

The Alphv ransomware group claims to have hacked Clarion, the global manufacturer of audio and video equipment for cars and other vehicles. The Alphv ransomware group added Clarion, the global manufacturer of audio and video equipment for cars and other vehicles, to the list of victims on its Tor leak site.

Manufacturing 140

Manufacturing Ransomware Data breaches Risk 140

Data Breach Today

MAY 11, 2021

Agency Found No Evidence Independent Repairs Increase Data Security Risks The FTC rejected arguments from major technology companies and trade groups that independent repair shops increase risks to data security.

Manufacturing 279

Manufacturing Cybersecurity Risk Security 279

Data Breach Today

OCTOBER 7, 2023

Brand-New Android Smartphones, Tablets and Connected TVs Harboring Trojan Backdoor Tens of thousands of knockoff Android products manufactured in China including TV streaming boxes reached consumers infected with malware, say cybersecurity researchers.

Manufacturing 290

Manufacturing Cybersecurity Security IT 290

Data Breach Today

DECEMBER 3, 2024

Flaws in Fuji's Tellus and V-Server Software Pose Risks to Critical Infrastructure Security researchers have uncovered 16 zero-day vulnerabilities in Japanese equipment manufacturer Fuji Electric's Tellus and V-Server remote monitoring software that enable attackers to execute malicious code in devices commonly used by utilities and other critical (..)

Manufacturing 253

Manufacturing Risk Security 253

Data Breach Today

JUNE 18, 2020

Program, Which Could Become Global, Designed to Evaluate Security of Connected Devices An Australian IoT alliance is developing a certification program designed to raise security standards for connected device manufacturers and give consumers more confidence that they're buying secure devices.

IoT 262

IoT Manufacturing Security 262

Data Breach Today

MAY 20, 2019

Drones May Be Sending Data Back to China, According to News Reports The Department of Homeland Security is warning that Chinese-made drones could be sending sensitive data back to their manufacturers, where it can be accessed by the government, according to news reports.

Manufacturing 262

Manufacturing Government Access Security 262

Data Breach Today

OCTOBER 28, 2020

Researcher Discovered Misconfigured Microsoft Azure Blog Cloud Server A misconfigured Microsoft Azure Blob cloud storage server used by Maruti Suzuki, an automobile manufacturer in India, exposed investors' personal and financial data online, according to a security researcher.

Manufacturing 255

Manufacturing Cloud Security 255

Data Breach Today

JUNE 28, 2021

Manufacturer Stopped Supporting Targeted Network-Attached Storage Devices in 2015 Owners of Western Digital My Book Live devices have seen their data remotely wiped by attackers targeting a flaw first detailed in 2019.

Manufacturing 264

Manufacturing Security 264

Data Breach Today

JANUARY 10, 2020

Congress Wants Security Vulnerabilities Addressed to Thwart Foreign Interference The CEOs of the three largest voting machine manufacturers testified before a U.S.

Manufacturing 239

Manufacturing Security 239