Government and IoT - Cyber Security Informer

Japanese Government Will Hack Citizens' IoT Devices

Schneier on Security

JANUARY 28, 2019

The Japanese government's decision to log into users' IoT devices has sparked outrage in Japan. However, the government's plan has its technical merits. Many of today's IoT and router botnets are being built by hackers who take over devices with default or easy-to-guess passwords.

IoT

IoT Government Firmware Hacking

New Report on IoT Security

Schneier on Security

SEPTEMBER 28, 2022

The Atlantic Council has published a report on securing the Internet of Things: “Security in the Billions: Toward a Multinational Strategy to Better Secure the IoT Ecosystem.”

IoT

IoT Telecommunications Manufacturing Internet

Analyzing IoT Security Best Practices

Schneier on Security

JUNE 25, 2020

New research: " Best Practices for IoT Security: What Does That Even Mean? " We consider categories of best practices, and how they apply over the lifecycle of IoT devices. by Christopher Bellman and Paul C.

IoT

IoT Manufacturing Internet Internet

Understanding the U.S. Cyber Trust Mark: A New Era for IoT Security

SecureWorld News

JANUARY 8, 2025

From baby monitors to home security systems, these IoT products have become integral to daily life, yet they also present significant cybersecurity risks. Industry leaders back the initiative Key stakeholders have expressed their enthusiasm for the Cyber Trust Mark's potential to improve IoT security and consumer trust.

IoT

IoT Manufacturing Government Cybersecurity

Measuring the Security of IoT Devices

Schneier on Security

OCTOBER 3, 2019

In August, CyberITL completed a large-scale survey of software security practices in the IoT environment, by looking at the compiled software. It represents a wide range of either found in the home, enterprise or government deployments. Vendors are Asus, Belkin, DLink, Linksys, Moxa, Tenda, Trendnet, and Ubiquiti.

IoT

IoT Firmware Data collection Architecture

Study: Consumer security savvy is way behind IoT threat landscape

Tech Republic Security

DECEMBER 20, 2022

A new Comcast study hints at a major risk to businesses, governments and public systems due to poor cybersecurity in the booming Internet of Things industry. The post Study: Consumer security savvy is way behind IoT threat landscape appeared first on TechRepublic.

IoT

IoT Internet Internet Government

STEPS FORWARD: Regulators are on the move to set much needed IoT security rules of the road

The Last Watchdog

SEPTEMBER 5, 2023

New government rules coupled with industry standards meant to give formal shape to the Internet of Things (IoT) are rapidly quickening around the globe. After all, government mandates combined with industry standards are the twin towers of public safety. Related: The need for supply chain security This is to be expected.

IoT

IoT Government Internet Internet

Here’s how anyone with $20 can hire an IoT botnet to blast out a week-long DDoS attack

The Last Watchdog

AUGUST 27, 2018

A nascent cottage industry is starting to gel around DDoS botnets-for-hire , comprised of millions of compromised IoT devices. IoT botnets can be hired to execute smaller-scaled DDoS attacks designed to knock out a networked application, rather than a whole website. IoT force multiplier. But that’s not all.

DDOS

DDOS IoT Digital transformation Internet

MY TAKE: Securing the Internet of Everything: why self-healing devices are the next frontier

The Last Watchdog

FEBRUARY 10, 2025

Related: IoT growing at a 24% clip To get there to fully tap the potential of a hyper-interconnected ecosystem where devices, data, AI and humans converge to benefit humankind cybersecurity must first catch up. Not coincidentally, industry standards groups and government regulators have stepped forward to embrace a vital supporting role.

Internet

Internet Internet IoT Manufacturing

IoT Security & Threat Modeling

Adam Shostack

JANUARY 2, 2025

Expanding on the UK Government's The Uk Code of Practice for Consumer IoT Security and how it aligns with Threat Modeling. There's a new report out from the UK Government, The UK Code of Practice for Consumer IoT Security.

IoT

IoT Government Technology

IoT standards: The US government must create them, and businesses will follow

Tech Republic Security

DECEMBER 11, 2020

The Internet of Things is still in its Wild West phase of development. Standardization is necessary to ensure safety and easier integration.

IoT

IoT Government Internet Internet

Cybersecurity experts hail new IoT law

Tech Republic Security

DECEMBER 14, 2020

The bill would increase protection for the billions of connected devices "owned or controlled by the government" in homes and businesses.

IoT

IoT Cybersecurity Government

'Best Practices for IoT Security'

Adam Shostack

JANUARY 2, 2025

There's an interesting new draft, Best Practices for IoT Security: What Does That Even Mean? There's an interesting new draft, Best Practices for IoT Security:What Does That Even Mean? by Christopher Bellman and Paul C. van Oorschot. It's by Christopher Bellman and Paul C. van Oorschot.

IoT

IoT Manufacturing Internet Internet

IoT Security Workshop (Seattle, August)

Adam Shostack

JANUARY 2, 2025

[no description provided] Jean Camp and Yoshi Kohno are organizing an interesting workshop upcoming at the University of Washington on " Best Practices In The IoT :" Our agenda begins with a presentation on the Federal Government initiatives in the IoT.

IoT

IoT Government

Malvertising Campaign Targets IoT Devices: GeoEdge

eSecurity Planet

AUGUST 9, 2021

A malicious advertising campaign originating out of Eastern Europe and operating since at least mid-June is targeting Internet of Things (IoT) devices connected to home networks, according to executives with GeoEdge, which offers ad security and quality solutions to online and mobile advertisers. Malvertising is Evolving.

IoT

IoT Advertising Identity Theft Mobile

Weekly Update 248

Troy Hunt

JUNE 19, 2021

If you like this sort of content then I'll try and be a bit more organised next time, give some notice and make more of an event out of it.

IoT

IoT Government Malware

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

The Hacker News

JANUARY 8, 2025

government on Tuesday announced the launch of the U.S. Cyber Trust Mark, a new cybersecurity safety label for Internet-of-Things (IoT) consumer devices. IoT products can be susceptible to a range of security vulnerabilities," the U.S. Federal Communications Commission (FCC) said.

IoT

IoT Internet Internet Government

5G and IoT security: Why cybersecurity experts are sounding an alarm

Tech Republic Security

MARCH 2, 2020

Without regulation and strong proactive measures, 5G networks remain vulnerable to cyberattacks, and the responsibility falls on businesses and governments.

IoT

IoT Cybersecurity Government

Weekly Update 245

Troy Hunt

MAY 28, 2021

The IoT march forward continues, this time replacing old corroded and shitty-in-every-way halogen bulbs (night time shot of the front of the house to be added to that thread shortly.) References Pwned Passwords, the.NET Foundation and the FBI (this is just awesome from top to bottom ??)

Passwords

Passwords IoT Government

Amazing Fast Crypto for IoT — US NIST Fingers ASCON

Security Boulevard

FEBRUARY 9, 2023

Implementing modern cryptography standards on tiny IoT devices is hard. The post Amazing Fast Crypto for IoT — US NIST Fingers ASCON appeared first on Security Boulevard. They’re underpowered, need to sip battery charge and something like AES is often overkill.

IoT

IoT Internet Internet Mobile

Brits Ban Default Passwords — and More IoT Stupidity

Security Boulevard

APRIL 30, 2024

The post Brits Ban Default Passwords — and More IoT Stupidity appeared first on Security Boulevard. The UK’s Product Security and Telecommunications Infrastructure Act aims to improve the security of net-connected consumer gear.

IoT

IoT Passwords Social Engineering Telecommunications

Sepio Systems: Cybersecurity Expert Joseph Steinberg Joins Advisory Board

Joseph Steinberg

NOVEMBER 17, 2021

He frequently serves as a cybersecurity expert witness , advises businesses and governments on information security matters, and has amassed millions of readers as a regular columnist for Forbes and Inc. His opinions are also frequently cited in books, law journals, security publications, and general interest periodicals.

Cybersecurity

Cybersecurity Artificial Intelligence Government Information Security

Experts warn of China-linked APT’s Raptor Train IoT Botnet

Security Affairs

SEPTEMBER 18, 2024

Researchers warn of a new IoT botnet called Raptor Train that already compromised over 200,000 devices worldwide. Cybersecurity researchers from Lumen’s Black Lotus Labs discovered a new botnet, named Raptor Train, composed of small office/home office (SOHO) and IoT devices. “This botnet has targeted entities in the U.S.

IoT

IoT Wireless DDOS Architecture

Weekly Update 251

Troy Hunt

JULY 11, 2021

and I'm sure there'll be an all new stash of cyber-IoT-other things waiting for me at the end of it 🙂 References Finally got my first COVID shot! Next week will start getting back to full steam as the winter holidays end (yeah, it's winter here, I know that's confusing for some people!)

IoT

IoT Encryption Government

Inrupt’s Solid Announcement

Schneier on Security

NOVEMBER 13, 2020

Data generated by your things — your computer, your phone, your IoT whatever — is written to your pod. It’s exciting to see organizations using Solid to improve the lives of everyday people – through better healthcare, more efficient government services and much more.

Insurance

Insurance IoT Healthcare Technology

Protecting Oil and Gas Industry Infrastructure: Strategies for Resilience

SecureWorld News

JANUARY 16, 2025

Digital transformation: The integration of IoT, SCADA systems, and advanced analytics has increased operational efficiency but also expanded the attack surface. Leverage data analysis: Data analytics and IoT technologies are revolutionizing the oil and gas sector, enabling better monitoring and threat detection.

Energy and Utilities

Energy and Utilities IoT Artificial Intelligence Backups

IoT Consumer Labeling Goes Global – What This Means for Vendors and Consumers

Security Boulevard

MARCH 21, 2024

IoT producers must comprehend the relevant rules, consult legal and technological experts and evaluate cybersecurity procedures. The post IoT Consumer Labeling Goes Global – What This Means for Vendors and Consumers appeared first on Security Boulevard.

IoT

IoT Technology Cybersecurity Internet

How Will 5G Technology Alter IoT Security And How Can We Prepare?

CyberSecurity Insiders

JANUARY 28, 2022

Moreover, predictions made by Gartner indicate that a staggering 59% of organizations plan to support their IoT networks through 5G- which opens up new avenues for cybercriminals to exploit. This article explores the possible ramifications that 5G could have for IoT security, along with some steps that enterprises can take to prepare for it.

IoT

IoT Technology Mobile Software

Weekly Update 212

Troy Hunt

OCTOBER 9, 2020

There's a decidedly adult theme running across the topics not by design, but just by pure coincidence between the Grindr incident, a query I got regarding erasing one's adult website browsing history and the IoT male chastity device full of security holes and potential requiring a grinder (not Grindr!) We live in interesting times.

IoT

IoT Government

Updated Kmsdx botnet targets IoT devices

Security Affairs

AUGUST 28, 2023

Researchers spotted an updated version of the KmsdBot botnet that is now targeting Internet of Things (IoT) devices. The Akamai Security Intelligence Response Team (SIRT) discovered a new version of the KmsdBot botnet that employed an updated Kmsdx binary targeting Internet of Things (IoT) devices.

IoT

IoT DDOS Architecture Internet

Ghost Ransomware a Persistent Global Threat to Critical Infrastructure

SecureWorld News

FEBRUARY 20, 2025

The FBI, CISA, and MS-ISAC have issued a joint cybersecurity advisory warning organizations about Ghost (Cring) ransomware, a sophisticated cyber threat that has been compromising critical infrastructure, businesses, and government entities worldwide.

Ransomware

Ransomware IoT Encryption Social Engineering

The SBOM Survival Guide: Why SBOM Compliance is Set to Ignite IoT Security

Security Boulevard

SEPTEMBER 11, 2024

The post The SBOM Survival Guide: Why SBOM Compliance is Set to Ignite IoT Security appeared first on Security Boulevard. Once SBOM and IAM provisioning knit seamlessly with policy-driven data encryption and AI-powered monitoring, they will have a far stronger security posture.

IoT

IoT Encryption Risk Government

Keep the lights on: Three things power companies need to do to harden cybersecurity defenses

Tech Republic Security

JULY 1, 2020

IoT device makers and the US government need to collaborate with the industry to make sure digital transformation closes security gaps instead of opening new ones.

Digital transformation

Digital transformation IoT Government Cybersecurity

Inrupt, Tim Berners-Lee's Solid, and Me

Schneier on Security

FEBRUARY 21, 2020

Data generated by your things -- your computer, your phone, your IoT whatever -- is written to your pod. Either IoT companies are going to enter into individual data sharing agreements, or they'll all use the same language and protocols. The idea behind Solid is both simple and extraordinarily powerful.

IoT

IoT Internet Internet Technology

Exclusive: Pro-Russia group ‘Cyber Spetsnaz’ is attacking government agencies

Security Affairs

JUNE 6, 2022

Following the attacks of the Killnet Collective, the group responsible for the attacks against major government resources and law enforcement, a new group has been identified called “Cyber Spetsnaz”. The post Exclusive: Pro-Russia group ‘Cyber Spetsnaz’ is attacking government agencies appeared first on Security Affairs.

Government

Government DDOS Cyber Attacks Hacking

Hackers Wanted—Ukraine Government Calls up its ‘Cybercommunity’

Security Boulevard

FEBRUARY 25, 2022

The post Hackers Wanted—Ukraine Government Calls up its ‘Cybercommunity’ appeared first on Security Boulevard. The Ukranian Defense Ministry is calling up volunteers to join a “cyber force”—to defend against Russian attacks.

Government

Government IoT Mobile Risk

The government of Lithuania confirmed it had been hit by an intense cyberattack

Security Affairs

JUNE 27, 2022

The government of Lithuania announced on Monday that it had been hit by an “intense” cyberattack, likely launched from Moscow, days after the Russian government protested restrictions Vilnius imposed on the rail transit of certain goods to Kaliningrad. which was one of the 1st targets of the new campaign.

Government

Government DDOS Media IoT

Weekly Update 249

Troy Hunt

JUNE 25, 2021

References We had some really nice downtime in a very tranquil environment (tweet thread of the holiday with pics) Spam sucks, even when the spammer doesn't think they're spamming (this one is going straight into the draft post I have on spam still being spam) I've finally upgraded Charlotte from a Mac to a Lenovo running Windows 10!

IoT

IoT Government

Integrating GRC with Emerging Technologies: AI and IoT

SecureWorld News

JANUARY 7, 2024

The integration of Governance, Risk, and Compliance (GRC) strategies with emerging technologies like Artificial Intelligence and the Internet of Things are reshaping the corporate risk landscape. Governance Governance refers to the policies, rules, and frameworks that a company needs to follow to meet its business targets.

IoT

IoT Technology Artificial Intelligence Government

A Robot the Size of the World

Schneier on Security

DECEMBER 15, 2023

This was the Internet of Things (IoT). And they will increasingly control our environment, through IoT devices and beyond. It will require a rethinking of much of our assumptions about governance and economy. It had actuators: Drones, autonomous cars. We’ve been building a world-sized robot without even realizing it.

Internet

Internet Internet IoT Banking

MY TAKE: ‘Network Detection and Response’ emerges as an Internet of Things security stopgap

The Last Watchdog

APRIL 9, 2020

Related: The promise, pitfalls of IoT Companies have commenced the dispersal of IoT systems far and wide. Data collected by IoT devices will increasingly get ingested into cloud-centric networks where it will get crunched by virtual servers. And fantastic new IoT-enabled services will spew out of the other end.

Internet

Internet Internet IoT Technology

IoT Connected Devices Pose Significant Risk to Organizations

Security Boulevard

JULY 24, 2023

Security flaws in connected devices and the IoT are plaguing the digital landscape, impacting a broad range of industries. The post IoT Connected Devices Pose Significant Risk to Organizations appeared first on Security Boulevard.

IoT

IoT Risk Internet Internet

Top 10 Cybersecurity Trends to Expect in 2025

Hacker's King

DECEMBER 24, 2024

As the digital landscape evolves, cybersecurity remains a critical concern for businesses, governments, and individuals alike. Growth of IoT Security Solutions With billions of Internet of Things (IoT) devices connecting to networks worldwide, IoT security will be a top priority.

Cybersecurity

Cybersecurity Cyber Insurance IoT Insurance

Japanese Government Will Hack Citizens' IoT Devices

New Report on IoT Security

Trending Sources

Analyzing IoT Security Best Practices

Understanding the U.S. Cyber Trust Mark: A New Era for IoT Security

Measuring the Security of IoT Devices

Study: Consumer security savvy is way behind IoT threat landscape

STEPS FORWARD: Regulators are on the move to set much needed IoT security rules of the road

Here’s how anyone with $20 can hire an IoT botnet to blast out a week-long DDoS attack

MY TAKE: Securing the Internet of Everything: why self-healing devices are the next frontier

IoT Security & Threat Modeling

IoT standards: The US government must create them, and businesses will follow

Cybersecurity experts hail new IoT law

'Best Practices for IoT Security'

IoT Security Workshop (Seattle, August)

Malvertising Campaign Targets IoT Devices: GeoEdge

Weekly Update 248

Top IoT Security Solutions of 2021

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

5G and IoT security: Why cybersecurity experts are sounding an alarm

Weekly Update 245

Amazing Fast Crypto for IoT — US NIST Fingers ASCON

Brits Ban Default Passwords — and More IoT Stupidity

Sepio Systems: Cybersecurity Expert Joseph Steinberg Joins Advisory Board

Experts warn of China-linked APT’s Raptor Train IoT Botnet

Weekly Update 251

Inrupt’s Solid Announcement

Protecting Oil and Gas Industry Infrastructure: Strategies for Resilience

IoT Consumer Labeling Goes Global – What This Means for Vendors and Consumers

How Will 5G Technology Alter IoT Security And How Can We Prepare?

Weekly Update 212

Updated Kmsdx botnet targets IoT devices

Ghost Ransomware a Persistent Global Threat to Critical Infrastructure

The SBOM Survival Guide: Why SBOM Compliance is Set to Ignite IoT Security

Keep the lights on: Three things power companies need to do to harden cybersecurity defenses

Inrupt, Tim Berners-Lee's Solid, and Me

Exclusive: Pro-Russia group ‘Cyber Spetsnaz’ is attacking government agencies

Hackers Wanted—Ukraine Government Calls up its ‘Cybercommunity’

The government of Lithuania confirmed it had been hit by an intense cyberattack

Weekly Update 249

Integrating GRC with Emerging Technologies: AI and IoT

A Robot the Size of the World

MY TAKE: ‘Network Detection and Response’ emerges as an Internet of Things security stopgap

IoT Connected Devices Pose Significant Risk to Organizations

Top 10 Cybersecurity Trends to Expect in 2025

Stay Connected