We have spent a couple weeks talking about the dreadful state of security with many IoT devices. Now we are going to provide you will some solutions.
Most of the weaknesses inherent in these devices come from the fact that they are set up to be “easy for anyone to install.” Which means that most of them will work straight from the box without a lot of painful configuration. Of ...
Continue Reading →
If you are curious how some of the research we featured in the last several post was accomplished, there is a company called Censys that has developed a search engine for Internet connected devices. I took a quick look, and immediately thought of applications that I could use when penetration testing. Take a minute to read the ...
Continuing where we left of last week, let’s take a look at the security of network connected medical devices. As we discussed in an earlier post, the Mayo Clinic recently sponsored a hackathon of sorts, inviting a number of security practitioners to their campus in Rochester Minnesota to see how hard it would be to hack the medical ...
Again from Pinterest – 24 examples of job failures. Don’t be like these guys!
You will have to click through the link to see the full image, it’s just too long for the blog.
So how would it be if you found out that the key to your house also worked at your neighbor’s house. What if it turned out the builder in your subdivision used the exact same lock on every house they built, and your key could get you into every house in your neighborhood?
This is essentially the situation that security researchers at SEC Consult discovered with a host of Internet ...
Continue Reading →
If the title seems confusing, it is not your fault. It is really tough to get my head around the epic failure of purported security companies who bring products like these to market. This practically qualifies as fraud!
The first story is about a manufacturer of security camera and DVR systems. This company is a white box manufacturer, in that they build products that are privately labelled by ...
Continue Reading →I have been collecting article links about cybersecurity issues affecting the increasing number of non-computer Internet connected devices, commonly known as the Internet of Things or IoT. In our enthusiasm to connect every device we own (thermostats, lighting controls, baby monitors, nanny cams and home security systems, etc.) to a smartphone app, the brilliant creators of these products ...
There is a fun little site that is tracking cyber-war attacks on infrastructure targets from all sources – human and non-human. Turns out the deadliest and most effective agents are squirrels. Check out this link, CyberSquirrel 1 and order some of their swag if you like.
I read about this first on Naked Security.
Be sure to check out the cool ...
Continue Reading →
I know it’s April Fool’s Day, but this is a straight up serious post. If you own, operate, host, support, or develop WordPress sites, this article is for you.
We have written a few articles covering the subject of WordPress security. I recently received an email from John Stevens over at HostingFacts.com, inviting me to review their excellent tutorial, 28 ...
Continue Reading →
March 31st is World Backup Day. On my way to the office today I saw someone driving down the highway in reverse. Not completely clear on the concept.
It has been three months since you made your New Year’s Resolution to really backup you data this year for sure!! Still kicking this one down the road? Well today is your day. Sign up for something easy like Carbonite and ...
Continue Reading →