IoT Security
The Kr00k vulnerability disclosed earlier this has only been found to impact devices using Wi-Fi chips from Broadcom and Cypress, but researchers revealed this...
Hi, what are you looking for?
SecurityWeek
ICS/OT
Dragos said customers will soon gain expanded asset visibility and integrated device intelligence, with automated remediation workflows and a unified platform experience to follow.
ICS/OT
Vulnerabilities in Zero Motorcycles electric motorcycles and Yadea electric scooters can pose physical security and safety risks.
Cybercrime
The lesser-known JackSkid and Mossad botnets have also been targeted in the operation.
IoT Security
Using low-cost receivers deployed along roads, academic researchers tracked drivers and their movement patterns.
IoT Security
Researchers have analyzed the security of DJI’s Pilot app for Android, but the Chinese drone giant says the claims they’ve made are misleading.
ICS/OT
A team of researchers from the Georgia Institute of Technology has demonstrated how, in theory, a malicious actor could manipulate the energy market using...
Endpoint Security
Companies affected by the recently disclosed GRUB2 bootloader vulnerability dubbed BootHole have started releasing advisories to inform customers about the impact of the issue...
IoT Security
Billions of Windows and Linux devices are affected by a serious GRUB2 bootloader vulnerability that can be exploited to install persistent and stealthy malware,...
Cybercrime
In a joint alert this week, the United States and the United Kingdom warned that a piece of malware has infected over 62,000 QNAP...
IoT Security
Netgear has started releasing patches for ten vulnerabilities affecting nearly 80 of its products, including flaws disclosed last year at the Pwn2Own hacking competition.
Endpoint Security
Driver vulnerabilities can facilitate attacks on ATMs, point-of-sale (PoS) systems and other devices, firmware security company Eclypsium warned on Monday.
IoT Security
IBM has disclosed the details of several vulnerabilities found in powerline extenders made by China-based networking solutions provider Tenda. IBM says Tenda ignored its...
Funding/M&A
Siemens this week announced that it is acquiring UltraSoC Technologies, a provider of embedded analytics and monitoring solutions for systems-on-chip (SoCs).
Funding/M&A
Microsoft announced on Monday that it has acquired industrial cybersecurity company CyberX in an effort to expand its Azure IoT security capabilities and extend...
ICS/OT
Millions of IoT devices worldwide could be vulnerable to remote attacks due to serious security flaws affecting the Treck TCP/IP stack, Israel-based cybersecurity company...
IoT Security
Chinese tech giant Tencent announced this week that it’s prepared to offer rewards of up to $140,000 for critical vulnerabilities found in its TencentOS...
Audits
The Defense Advanced Research Projects Agency (DARPA) is running a bug bounty program in an effort to find security vulnerabilities in a new, advanced...
ICS/OT
A critical vulnerability affecting traffic light controllers made by SWARCO could have been exploited by hackers to disrupt a city’s traffic lights.
IoT Security
Samsung on Tuesday unveiled a new security solution — composed of a secure element (SE) chip and security software — designed to enhance data...
Cybersecurity Funding
Forescout Warns That Acquisition by PE Firm Advent International May Not Happen
Cyber Insurance
Researchers from cybersecurity firm Trend Micro and the Polytechnic University of Milan have analyzed the possible entry points and vectors for attacks targeting smart...
IoT Security
Designed to Launch DDoS Attacks, the Golang-Based 'Kaiji' Botnet Infects Devices via SSH Brute Force
Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.
RegisterExplore how attackers are using AI to scale threats and how security teams can respond with AI-driven defenses. Protecting against unmonitored use of generative AI (Shadow AI) in business units and building and enforcing AI governance frameworks.
RegisterExpert Insights
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)
As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.
(Joshua Goldfarb)
The organizations best prepared to face disruption are those that align security, continuity and risk management around what the business cannot afford to lose.
(Steve Durbin)
For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum game.
(Nadir Izrael)