IoT Security
Unpatched D-Link NAS device vulnerability CVE-2024-3273, potentially affecting many devices, is being exploited in the wild.
Hi, what are you looking for?
SecurityWeek
IoT Security
The guidance aims to establish product cybersecurity requirements for IoT devices integrated into federal agencies’ networks.
ICS/OT
Dragos said customers will soon gain expanded asset visibility and integrated device intelligence, with automated remediation workflows and a unified platform experience to follow.
ICS/OT
Vulnerabilities in Zero Motorcycles electric motorcycles and Yadea electric scooters can pose physical security and safety risks.
Cybercrime
The lesser-known JackSkid and Mossad botnets have also been targeted in the operation.
ICS/OT
An analysis by Forescout shows 300,000 Chinese devices in the US, up 40% compared to the previous year, despite bans.
IoT Security
Self check-in kiosks at Ibis Budget hotels were affected by a vulnerability that exposed keypad codes that could be used to enter rooms.
IoT Security
Malware hunters sound an alarm after discovering a 40,000-strong botnet packed with end-of-life routers and IoT devices being used in cybercriminal activities.
ICS/OT
Software risk management firm Finite State has raised a $20 million growth round led by Energy Impact Partners (EIP).
IoT Security
Participants earned a total of $732,500 on the first day of Pwn2Own Vancouver 2024 for hacking a Tesla, operating systems, and other software.
ICS/OT
Vulnerabilities affecting a Nice Linear physical access product, including an exploited flaw, patched five years after their disclosure.
IoT Security
Multiple vulnerabilities in Sceiner firmware allow attackers to compromise smart locks and open doors.
ICS/OT
XIoT cybersecurity company Claroty has raised another $100 million at a reported valuation of $2.5 billion.
IoT Security
A high-severity vulnerability in HikCentral Professional could lead to unauthorized access to certain URLs.
IoT Security
Major vulnerabilities were found in cameras manufactured by the Chinese company Eken Group Ltd., which produces video doorbells under the brand names EKEN and...
IoT Security
Government probe could lead to new regulations aimed at preventing China from using sophisticated technology in connected vehicles to track drivers and their personal...
Cyber Insurance
Because you can’t secure what you can’t see, having real-time asset visibility across the network is vital to maximizing security, minimizing risk, and protecting...
IoT Security
Three million electric toothbrushes were reportedly used for disruptive DDoS attacks, but cybersecurity experts questioned the claims.
Cybersecurity Funding
Device Authority raises $7 million in a Series A funding round for its enterprise identity and access management for IoT solution.
IoT Security
Navblue Flysmart+ Manager allowed attackers to modify aircraft engine performance calculation, intercept data.
IoT Security
Apple releases first security update for Vision Pro VR headset as CISA issues warning about exploitation of iOS vulnerability.
ICS/OT
Nozomi Networks extends its offering with Guardian Air, a security sensor designed to help organizations detect wireless threats in OT and IoT.
IoT Security
Participants have earned more than $1.3 million for hacking Teslas, EV chargers and infotainment systems at Pwn2Own Automotive.
IoT Security
Over $1 million paid out in the first two days of Pwn2Own Automotive for Tesla, infotainment and EV charger hacks.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)