Hot Topics

IoT & ICS Security

Unsafelok Threat Highlights It’s About Both IoT Devices and Applications

| | Blog, cyber, iot, remediation, Vulnerabilities
IoT devices and applications exist all over the place, and in high volume.  Today’s news brought yet another example of how the scale of IoT systems leads to the conclusion that their ...
Viakoo, Inc
Public washroom faucets

EPA and White House Raise Alarm on Water Cybersecurity

| | Critical Infrastructure, critical infrastructure assets, critical infrastructure attack, Critical Infrastructure Cyber security, Critical Infrastructure Cybersecurity, Drinking Water, Environmental Protection Agency, EPA, ICS, operational technologies, OT, public water systems, SB Blogwatch, wastewater, water, water distribution systems, Water industry, water infrastructure, White House
Iran and China fingered: Biden admin. chides governors: Water infra. lacks “even basic cybersecurity precautions.” ...
Security Boulevard

Drones and the US Air Force

| | Defense, Department of Defense, drones, economics of security, Uncategorized, War
Fascinating analysis of the use of drones on a modern battlefield—that is, Ukraine—and the inability of the US Air Force to react to this change. The F-35A certainly remains an important platform ...
Schneier on Security
Two stacks of money on top of a white table.

Google Splashes the Cash in Bug Bounty Bonanza: $59 Million to Date

| | alphabet, bounty, bug bounty, bug bounty program, bugbounty, ethical hacker, ethical hackers, ethical hacking, google, SB Blogwatch, Vulnerability Rewards Program (VRP), white hat, white hat hacker, white hat hackers, White Hat Security, White Hats, WhiteHat, whitehat hackers, WhiteHat Security
Wanna be a VRP VIP? Last year, $GOOG paid $10 million to ethical hackers for finding vulnerabilities ...
Security Boulevard
Director of the Cybersecurity and Infrastructure Security Agency, Jen Easterly

Irony of Ironies: CISA Hacked — ‘by China’

| | china, china espionage, Chinese, Chinese Communists, Chinese drive-by attack, chinese government, chinese hacker, Chinese hackers, Chinese state-sponsored hacking group, Chinese Threat Actors, CIRCIA, cisa, CISA.gov, CVE-2023-46805, CVE-2024-21887, CVE-2024-21893, Cyber Security and Infrastructure Security Agency, Cybersecurity & Infrastructure Security Agency, Cybersecurity and Infrastructure Agency, Data Stolen By China, federal agency, Ivanti, Ivanti Connect Secure, Ivanti Policy Secure, Ivanti security, Ivanti Vulnerabilities, Ivanti Zero day vulnerability, Ligolo, Magnet Goblin, NerbianRAT, NSA/CISA, Peoples Republic of China, SB Blogwatch, Volt Typhoon, WARPWIRE
Free rides and traffic jams: U.S. Cybersecurity and Infrastructure Security Agency penetrated in February, via vuln in Ivanti ...
Security Boulevard

Emerging Trends in Embedded Linux IoT Security

| | embedded linux, Embedded Linux IoT Security, iot, Live Patching Education, Trends in Embedded Linux IoT
Mitigating potential vulnerabilities requires proactive measures due to the complexity of embedded Linux IoT devices The use of containerization and virtualization reduces the attack surface and minimizes the impact of security breaches ...
TuxCare
LLM firewall AI

Cloudflare Unveils a Firewall Designed to Keep LLMs Safe

| | CloudFlare, firewall, Generative AI risks, LLMs
Cloudflare wants to help organizations wall off their large-language models (LLMs) from cyberthreats and give enterprises an AI framework to ward off risks, many of which are themselves based on the emerging ...
Security Boulevard
Phobos ransomware CISA

CISA Warns Phobos Ransomware Groups Attacking Critical Infrastructure

| | cisa, Critical Infrastructure Security, Phobos, Ransomware
Phobos, a complex ransomware-as-a-service (RaaS) operation that has been around for five years and is includes multiple variants, continues to target a range of critical infrastructure in the United States, including education, ...
Security Boulevard
An extreme closeup of a human eye

Cheap Video Doorbell Cams: Tools of Stalkers and Thieves

| | Andoe, Anker, camera, camera hijacking, camera vulnerability, cameras, CCTV camera, CCTV cameras, Consumer IoT, Consumer Reports, Doorbell Camera, Eken, enshittification, Eufy, Fishbot, Gemee, hacked Wi-FI, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things cyber security, internet-enabled cameras, iot, IoT camera, IoT security camera, IP surveillance cameras, ipcamera, Luckwolf, Rakeblue, Ring Camera, Ring Doorbell, safe wifi, SB Blogwatch, Sears, SHEIN, The ‘S’ in IoT stands for Security, Tuck, unsecure Wi-FI, Wi-Fi, Wi-Fi hacking, Wi-Fi networks, wi-fi security, Wyze
EKEN IoT FAIL: Amazon, Sears and Shein still sell security swerving stuff ...
Security Boulevard
AI ML IoT security NicheStack edge computing IoT Security

IT Leaders Lack Confidence in IoT Security Plans

| | Device Security, edge computing, endpoint, Internet of things, iot
There is a significant lack of confidence among IT leaders regarding their internet-of-things (IoT) security plans ...
Security Boulevard
Load more