IoT Security
ZDI is offering more than $1 million at the Pwn2Own Automotive hacking contest, hosted in January at the Automotive World conference in Tokyo.
Hi, what are you looking for?
SecurityWeek
Cybersecurity Funding
‘Machine identities’, often used interchangeably with ‘non-human identities’ (NHIs), have been increasing rapidly since the start of digital transformation.
IoT Security
PCA Cyber Security has discovered critical vulnerabilities in the BlueSDK Bluetooth stack that could have allowed remote code execution on car systems.
IoT Security
Rapid7 has found several serious vulnerabilities affecting over 700 printer models from Brother and other vendors.
IoT Security
The new attack technique uses smartwatches to capture ultrasonic covert communication in air-gapped environments and exfiltrate data.
IoT Security
Roughly 78% of the healthcare organizations in North America, South America, the APAC region, and Europe experienced a cyberattack over the past year, according...
ICS/OT
As smart cities evolve with more and more integrated connected services, cybersecurity concerns will increase dramatically.
IoT Security
Vulnerabilities in the TP-Link Tapo L530E smart bulb and accompanying mobile application can be exploited to obtain the local Wi-Fi password.
Government
The US government's cybersecurity agency describes UEFI as "critical attack surface" that requires urgent security attention.
IoT Security
Internet-connected Peloton workout equipment is impacted by multiple security risks, such as having USB debugging enabled.
Government
New US cyber program will label smart devices that are considered safer and less vulnerable to attacks.
Cybercrime
Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of June 19,...
ICS/OT
Enphase Energy has ignored CISA requests to fix remotely exploitable vulnerabilities in Enphase products.
IoT Security
New research conducted by IOActive shows the potential of electromagnetic fault injection (EMFI) attacks against drones.
IoT Security
The FTC charged Amazon-owned Ring with failing to implement basic protections to stop hackers or employees from accessing people's devices or accounts.
IoT Security
FDA and CISA notify healthcare providers about a component used by several Illumina medical devices being affected by serious vulnerabilities that can allow remote...
Government
CISA has described and published a set of principles for the development of security-by-design and security-by-default cybersecurity products.
IoT Security
Hikvision patches CVE-2023-28808, a critical authentication bypass vulnerability that exposes video data stored on its Hybrid SAN and cluster storage products.
IoT Security
An innocent-looking portable speaker can hide a hacking device that launches CAN injection attacks, which have been used to steal cars.
IoT Security
Nexx has ignored repeated attempts to report critical product vulnerabilities that can be exploited to remotely open garage doors, and take control of alarms...
IoT Security
The FDA is asking medical device manufacturers to provide cybersecurity-related information when submitting an application for a new product.
IoT Security
Researchers at offensive hacking shop Synacktiv demonstrated successful exploit chains and were able to “fully compromise” Tesla’s newest electric car and take top billing...
CISO Strategy
Cyberattacks have exposed a myriad of vulnerabilities in our healthcare infrastructure, and will continue to do so as new and innovative medical technologies are...
IoT Security
Researchers discover a dozen serious vulnerabilities in Akuvox smart intercom, but the vendor has not released any patches.
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
AI-made decisions are in many ways shaping and governing human lives. Companies have a moral, social, and fiduciary duty to responsibly lead its take-up.
(Stu Sjouwerman)
Ransomware is a major threat to the enterprise. Tools and training help, but survival depends on one thing: your organization’s muscle memory to respond fast and recover stronger.
(Trevin Edgeworth)
Strong security doesn’t just rely on tools—it starts with trust, clarity, and sincerity from the top down.
(Joshua Goldfarb)
The future of secure digital engagement depends on continuous identity verification and proofing that can scale with risk.
(Torsten George)
In a rapidly changing AI environment, CISOs are worried about investing in the wrong solution or simply not investing because they can’t decide what the best option is.
(Marc Solomon)