Cybercrime
A threat actor tracked as Water Barghest has compromised over 20,000 IoT devices and monetizes them as residential proxies.
Hi, what are you looking for?
SecurityWeek
IoT Security
The new attack technique uses smartwatches to capture ultrasonic covert communication in air-gapped environments and exfiltrate data.
IoT Security
Bitsight has identified over 40,000 security cameras that can be easily hacked for spying or other types of malicious activity.
IoT Security
Professional hackers have built a network of ASUS routers that can survive firmware upgrades, factory reboots and most anti-malware scans.
IoT Security
Threat actors started exploiting a vulnerability in Samsung MagicINFO only days after a PoC exploit was published.
IoT Security
D-Link warns of a critical-severity command injection vulnerability impacting multiple discontinued NAS models.
IoT Security
ZDI discloses vulnerabilities in the infotainment system of multiple Mazda car models that could lead to code execution.
IoT Security
Door access controllers remain vulnerable to remote hacker attacks for extended periods of time, a researcher has found.
IoT Security
Security researchers detail vulnerabilities in Kia owners’ portal that allowed them to control vehicles remotely.
ICS/OT
A researcher analyzing building access control vulnerabilities says a US healthcare facility has yet to patch security holes one year after being notified.
Government
In extreme situations, a foreign adversary could shut down or take simultaneous control of multiple vehicles operating in the United States, causing crashes and...
IoT Security
Doctor Web warns of the new Vo1d Android malware infecting roughly 1.3 million TV boxes running older OS versions.
IoT Security
A significant backdoor in contactless cards made by China-based Shanghai Fudan Microelectronics allows instantaneous cloning of RFID cards used to open office doors and...
IoT Security
Sonos has patched vulnerabilities in its smart speakers, including a serious flaw that could have been exploited to eavesdrop on users.
ICS/OT
Vulnerabilities found in solar power systems could have been exploited by hackers to cause disruption and possibly blackouts.
IoT Security
A recently patched Vision Pro vulnerability was classified by Apple as a DoS issue, but a researcher has shown that it’s ‘scary’.
IoT Security
Apple has released a visionOS update that patches CVE-2024-27812, which may be the first flaw specific to the VR headset.
IoT Security
Forescout's 2024 analysis of the riskiest devices highlights vulnerabilities and threat actor interactions across IT, IoT, OT, and IoMT.
IoT Security
Under the new U.S. Cyber Trust Mark Initiative, manufacturers can affix the label on their products if they meet federal cybersecurity standards.
IoT Security
MITRE announced the public availability of the EMB3D threat model for embedded devices used in critical infrastructure.
ICS/OT
As cyber threats grow more sophisticated, America cannot afford complacency. The time for decisive action and enhanced cyber resilience is now.
IoT Security
Second identifier, CVE-2024-3272, assigned to unpatched D-Link NAS device vulnerabilities, just as exploitation attempts soar.
IoT Security
Many LG TVs may be vulnerable to remote hacking due to a series of vulnerabilities found by Bitdefender researchers.
IoT Security
Unpatched D-Link NAS device vulnerability CVE-2024-3273, potentially affecting many devices, is being exploited in the wild.
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
It’s time for enterprises to stop treating unmanaged devices as an edge case and start securing them as part of a unified Zero Trust strategy.
(Etay Maor)
Many security professionals feel pressured to pursue leadership roles, but success can also mean going deeper, not just higher.
(Joshua Goldfarb)
AI is transforming the cybersecurity landscape—empowering attackers with powerful new tools while offering defenders a chance to fight back. But without stronger awareness and strategy, organizations risk falling behind.
(Trevin Edgeworth)
Agentic AI can be a great tool for many of the ‘gray area’ tasks that SOC analysts undertake.
(Marc Solomon)
In the end, cybersecurity isn’t just about collecting data. It’s about proving that your defenses actually work.
(Torsten George)