New Report on IoT Security
Schneier on Security
SEPTEMBER 28, 2022
The Atlantic Council has published a report on securing the Internet of Things: “Security in the Billions: Toward a Multinational Strategy to Better Secure the IoT Ecosystem.”
Engineering Internet IoT 
KrebsOnSecurity Hit By Huge New IoT Botnet “Meris”
Krebs on Security
SEPTEMBER 10, 2021
The assault came from “ Meris ,” the same new “Internet of Things” (IoT) botnet behind record-shattering attacks against Russian search giant Yandex this week and internet infrastructure firm Cloudflare earlier this summer. Cloudflare recently wrote about its attack , which clocked in at 17.2
IoT 
317
317 Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
IoT Unravelled Part 3: Security
Troy Hunt
NOVEMBER 25, 2020
In part 1 of this series, I posited that the IoT landscape is an absolute mess but Home Assistant (HA) does an admirable job of tying it all together. As with the rest of the IoT landscape, there's a lot of scope for improvement here and also just like the other IoT posts, it gets very complex for normal people very quickly.
IoT 354
354 
Using Hacked IoT Devices to Disrupt the Power Grid
Schneier on Security
SEPTEMBER 11, 2018
This is really interesting research: " BlackIoT: IoT Botnet of High Wattage Devices Can Disrupt the Power Grid ": Abstract : We demonstrate that an Internet of Things (IoT) botnet of high wattage devices-such as air conditioners and heaters-gives a unique ability to adversaries to launch large-scale coordinated attacks on the power grid.
IoT 242
242 
New IoT Security Regulations
Schneier on Security
NOVEMBER 13, 2018
Due to ever-evolving technological advances, manufacturers are connecting consumer goods -- from toys to lightbulbs to major appliances -- to the internet at breakneck speeds. This is the Internet of Things, and it's a security nightmare. But it's just one of dozens of awful "security" measures commonly found in IoT devices.
IoT 231
231 
STEPS FORWARD: Regulators are on the move to set much needed IoT security rules of the road
The Last Watchdog
SEPTEMBER 5, 2023
New government rules coupled with industry standards meant to give formal shape to the Internet of Things (IoT) are rapidly quickening around the globe. When it comes to IoT, we must arrive at specific rules of the road if we are to tap into the full potential of smart cities, autonomous transportation and advanced healthcare.
IoT 220
220 
Threat Modeling & IoT
Adam Shostack
JANUARY 2, 2025
[no description provided] Threat modeling internet-enabled things is similar to threat modeling other computers, with a few special tensions that come up over and over again. You can start threat modeling IoT with the four question framework: What are you building? What can go wrong? What are you going to do about it? Don Bailey)
IoT 130
130 
Hacking a Coffee Maker
Schneier on Security
SEPTEMBER 29, 2020
As expected, IoT devices are filled with vulnerabilities : As a thought experiment, Martin Hron, a researcher at security company Avast, reverse engineered one of the older coffee makers to see what kinds of hacks he could do with it. After just a week of effort, the unqualified answer was: quite a lot.
Hacking 360
360 
20 Year Software: Engineering and Updates
Adam Shostack
JANUARY 2, 2025
Yahoo and Altavista were our gateways to the internet. We need to figure out what engineering software looks like for a twenty year lifespan, and part of that will be really doing such engineering, because theory will only take us to the limits of our imaginations. Steve Jobs just returned to Apple. Google didn't exist yet.
Engineering 130
130 
NEW TECH: Exabeam positions SIEM technology to help protect IoT, OT systems
The Last Watchdog
MARCH 9, 2020
Their capacity to ingest threat feeds is becoming more relevant with the rise of IoT (Internet of Things) systems and the vulnerabilities of old and new OT (operational technology). Digital transformation is leading to more intensive use of the cloud, faster development of software to support it, and the growth of the IoT.
IoT 179
179 
MY TAKE: The role of semiconductors in bringing the ‘Internet of Everything’ into full fruition
The Last Watchdog
DECEMBER 11, 2022
The Internet of Everything ( IoE ) is on the near horizon. For instance, very visibly over the past decade, Internet of Things ( IoT ) computing devices and sensors have become embedded everywhere. Smart devices and IoT systems are beginning to interconnect with each other and this is only going to continue.”.
Internet 189
189 
MY TAKE: Why the Matter smart home standard portends the coming of the Internet of Everything
The Last Watchdog
OCTOBER 19, 2022
Matter is intended to be the lingua franca for the Internet of Things. To get a full grasp on why Matter matters, I recently visited with Steve Hanna, distinguished engineer at Infineon Technologies , a global semiconductor manufacturer based in Neubiberg, Germany. It’s only a first step and there’s a long way to go. Baked-in security.
Internet 44
44 
Shodan: Still the Scariest Search Engine on the Internet?
Security Boulevard
MAY 31, 2022
In April of 2013, CNN introduced the world to Shodan, a search engine for internet-connected devices, by publishing an article titled, Shodan: The scariest search engine on the Internet. The post Shodan: Still the Scariest Search Engine on the Internet?
Engineering 98
98 
Hacking IoT & RF Devices with BürtleinaBoard
Security Affairs
JULY 28, 2020
How to hack IoT & RF Devices with BürtleinaBoard. Few months ago I have presented #FocacciaBoard : a similar multipurpose breakout board that uses the famous FT232H to handle multiple protocols commonly found in (I)IoT devices (i.e. The post Hacking IoT & RF Devices with BürtleinaBoard appeared first on Security Affairs.
IoT 145
145 
Top IoT Security Solutions of 2021
eSecurity Planet
NOVEMBER 19, 2021
IoT security is where endpoint detection and response ( EDR ) and enterprise mobility management ( EMM ) meet the challenges of a rapidly expanding edge computing infrastructure. As the enterprise attack surface grows, IoT is yet another attack vector organizations aren’t fully prepared to defend.
IoT 132
132 
New Shodan Monitor service allows tracking Internet-Exposed devices
Security Affairs
MARCH 28, 2019
Shodan IoT search engine announced the launch of a new service called Shodan Monitor designed to help organizations to maintain track of systems connected to the Internet. Shodan Monitor is a precious tool for organizations that can determine their surface of attack assessing their Internet-exposed systems.
Internet 111
111 
“Best Practices for IoT Security”
Adam Shostack
JUNE 8, 2020
There’s an interesting new draft, Best Practices for IoT Security:What Does That Even Mean? It’s by Christopher Bellman and Paul C. van Oorschot.
IoT 124
124 
Brits Ban Default Passwords — and More IoT Stupidity
Security Boulevard
APRIL 30, 2024
The post Brits Ban Default Passwords — and More IoT Stupidity appeared first on Security Boulevard. The UK’s Product Security and Telecommunications Infrastructure Act aims to improve the security of net-connected consumer gear.
IoT 135
135 
New 0-Day Attacks Linked to China’s ‘Volt Typhoon’
Krebs on Security
AUGUST 27, 2024
Malicious hackers are exploiting a zero-day vulnerability in Versa Director , a software product used by many Internet and IT service providers. ” Ryan English , an information security engineer at Lumen, said it’s disappointing his employer didn’t at least garner an honorable mention in Versa’s security advisory.
Internet 313
313 
IoT riddled with BadAlloc vulnerabilities
Malwarebytes
APRIL 30, 2021
Those operating systems and libraries are widely used in smart, Internet-connected “things” The number of affected devices could be enormous. The researchers found that memory allocation implementations written throughout the years as part of IoT devices and embedded software have not incorporated proper input validations.
IoT 109
109 
IoT devices at major Manufacturers infected with crypto-miner
Security Affairs
FEBRUARY 8, 2020
Hackers have infected with a piece of malware some IoT devices running Windows 7 designed by three of the world’s largest manufacturers. Security experts from TrapX reported that some IoT devices running Windows 7 have been infected with a piece of malware, is it a supply chain attack? Pierluigi Paganini.
Manufacturing 145
145 
Working Remotely? Remember to Secure Your Webcam
Adam Levin
MARCH 17, 2020
Internet of Things (IoT) devices in general have earned a reputation for poor cybersecurity, and internet-connected cameras are no exception. Setting up a firewall, or configuring your internet router to block unwanted incoming internet traffic can add another level of protection between your home devices and hackers.
IoT 201
201 
Microsoft warns of damaging vulnerabilities in dozens of IoT operating systems
SC Magazine
APRIL 30, 2021
The IoT security team at the Microsoft Security Response Center said vulnerabilities discovered affect at least 25 different products made by more than a dozen organizations, including Amazon, ARM, Google Cloud, Samsung, RedHat, Apache and others. A signage of Microsoft is seen on March 13, 2020 in New York City. Jeenah Moon/Getty Images).
IoT 120
120 
Kalay cloud platform flaw exposes millions of IoT devices to hack
Security Affairs
AUGUST 17, 2021
FireEye Mandiant researchers have discovered a critical vulnerability in the Kalay cloud platform that exposes millions of IoT devices to attacks. The flaw could be easily exploited by a remote attacker to take over an IoT device, the only info needed for the attack is the Kalay unique identifier (UID) of the targeted user.
IoT 124
124 
Exclusive: MalwareMustDie analyzes a new IoT malware dubbed Linux/ AirDropBot
Security Affairs
SEPTEMBER 30, 2019
After 2 years of waiting, MalwareMustDie returns with an excellent page of malware analysis of a new IoT malware: Linux/AirDropBot. The beginning of the story: another IoT malware in the wild? Coming to the core topic: IoT botnet threat and their ecosystem.
IoT 109
109 
Lousy IoT Security
Schneier on Security
DECEMBER 19, 2019
These are stupid design decisions made by engineers who had no idea how to create a secure system. And this, in a nutshell, is the problem with the Internet-of-Things. These aren't subtle vulnerabilities. Or anyone could have remotely nabbed the entire trove of customers' data.
IoT 131
131 
It’s official, today you can say goodbye to Internet Explorer. Or can you?
Malwarebytes
JUNE 15, 2022
Today, the Internet Explorer (IE) 11 desktop application goes out of support and will be retired for certain versions of Windows 10. Microsoft’s Internet Explorer 1.0 With Windows 10, Edge became the default Microsoft browser, but Internet Explorer could still be found in the Windows Accessories folder. Not so much.
Internet 98
98 
March to 5G could pile on heavier security burden for IoT device manufacturers
SC Magazine
APRIL 9, 2021
As the Department of Defense works on standards to dictate 5G rollout, security requirements may be too much for IoT manufacturers. Of course, many security hurdles for IoT device manufacturers are not specific to 5G. . The Internet of Things Cybersecurity Improvement Act of 2020 , which was enacted Dec. chapter of AFCEA.
Manufacturing 114
114 
ZoomEye IoT search engine cached login passwords for tens of thousands of Dahua DVRs
Security Affairs
JULY 16, 2018
A security researcher discovered that the IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs. The IoT search engine ZoomEye has cached login passwords for tens of thousands of Dahua DVRs, the discovery was made by security researcher Ankit Anubhav, Principal Researcher at NewSky Security.
IoT 75
75 Inside Mirai the infamous IoT Botnet: A Retrospective Analysis
Elie
DECEMBER 2, 2017
This post provides a retrospective analysis of Mirai — the infamous Internet-of-Things botnet that took down major websites via massive distributed denial-of-service using hundreds of thousands of compromised Internet-Of-Things devices. At its peak, Mirai enslaved over 600,000 vulnerable IoT devices, according to our measurements.
IoT 107
107 
Gucci IOT Bot Discovered Targeting European Region
Security Affairs
OCTOBER 1, 2019
Security Labs discovered a new IOT bot named “GUCCI”. It seems like the IOT botnet is named after an Italian luxury brand of fashion and leather goods. The IOT threat detection engine picked the infection IP has shown below hosting number of bins for different architectures. Inference. Pierluigi Paganini.
IoT 105
105 
Giving a Face to the Malware Proxy Service ‘Faceless’
Krebs on Security
APRIL 18, 2023
Kilmer said Faceless has emerged as one of the underground’s most reliable malware-based proxy services, mainly because its proxy network has traditionally included a great many compromised “Internet of Things” devices — such as media sharing servers — that are seldom included on malware or spam block lists.
Malware 273
273 
Hacking IoT devices with Focaccia-Board: A Multipurpose Breakout Board to hack hardware in a clean and easy way!
Security Affairs
FEBRUARY 18, 2020
Even before the appearance of the word (I)IoT, I was breaking hardware devices, as many of you, with a multitude of debuggers (i.e. But it saves my time while hacking (I)IoT targets. SecurityAffairs – hacking IoT, Focaccia board). stlink, jlink, RS23–2-2USB, etc.). Note: this is not wired with the FT232H anyhow, is up to you.
IoT 127
127 
LW ROUNDTABLE — How 2024’s cyber threats will transform the security landscape in 2025
The Last Watchdog
DECEMBER 16, 2024
Sundaresan Bindu Sundaresan , Cybersecurity Director, LevelBlue In 2025, cybercriminals will exploit supply chain vulnerabilities, ransomware, IoT botnets, and AI-driven phishing. Rising IoT use demands standards to prevent device weaponization, while AI-enabled phishing challenges defenses.
Cyber threats 264
264 
The BotenaGo Botnet Targets IoT Devices
Heimadal Security
NOVEMBER 12, 2021
BotenaGo is a virus developed in Golang (Go), a programing language that has exploded in popularity in recent years, with malware developers praising it for producing harder-to-detect and reverse-engineer payloads. The post The BotenaGo Botnet Targets IoT Devices appeared first on Heimdal Security Blog.
IoT 80
80 
When Coffee Machines Demand Ransom, You Know IoT Is Screwed
WIRED Threat Level
OCTOBER 1, 2020
A researcher reverse engineered an internet-connected coffee maker to see what kinds of hacks he could do with it. The answer: quite a lot.
IoT 108
108 
Named Data Networking for IoT
Security Boulevard
DECEMBER 9, 2021
What is Named Data Networking for IoT Source: [link] The rise of the Internet of Things (IoT) has urged a new Internet architecture as IoT differs from the current Internet architecture due to constraints of devices’ resources and enormous volumes of small exchanged data.
IoT 64
64 
7 Top Tips for Accelerating your IoT Projects in 2021
CyberSecurity Insiders
MARCH 25, 2021
billion IoT devices active across the world – a figure that is expected to grow to 75 billion by 2025. This tripling will be a phenomenal feat to achieve in the next four years and relies upon IoT projects that are currently planned or under development to mature quickly. 1 Consider using generic IoT service modules.
IoT 100
100 
Russia-linked STRONTIUM APT targets IoT devices to hack corporate networks
Security Affairs
AUGUST 6, 2019
The STRONTIUM Russia-linked APT group is compromising common IoT devices to gain access to several corporate networks. Researchers at Microsoft observed the Russia-linked APT group STRONTIUM abusing IoT devices to gain access to several corporate networks. ” IoT risk must be taken seriously. ” continues Microsoft.
IoT 98
98 
Experts hacked 28,000 unsecured printers to raise awareness of printer security issues
Security Affairs
AUGUST 27, 2020
To perform the experiment, we used Internet of Things (IoT) search engines to search for open devices that utilized common printer ports and protocols. After filtering out most of the false positives, we were left with more than 800,000 printers that had network printing features enabled and were accessible over the internet.
Hacking 145
145 
Naming & Shaming Web Polluters: Xiongmai
Krebs on Security
OCTOBER 9, 2018
What do we do with a company that regularly pumps metric tons of virtual toxic sludge onto the Internet and yet refuses to clean up their act? Since then, two of those firms — Huawei and Dahua — have taken steps to increase the security of their IoT products out-of-the-box. Source: xiongmaitech.com. BLANK TO BANK.
Largest DDoS attack ever reported gets hoovered up by Cloudflare
Malwarebytes
AUGUST 20, 2021
For Internet devices, the network edge is where the device, or the local network containing the device, communicates with the Internet. You may remember hearing about this botnet after the massive East Coast internet outage of 2016 when the Mirai botnet was leveraged in a DDoS attack aimed at Dyn, an Internet infrastructure company.
DDOS 139
139 Whistleblower: Ubiquiti Breach “Catastrophic”
Krebs on Security
MARCH 30, 2021
NYSE:UI] — a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders and security cameras — disclosed that a breach involving a third-party cloud provider had exposed customer account credentials. 11, Ubiquiti Inc. 11 this year, now would be a good time to care of that.
Accountability 280
280 
Let's personalize your content