At the Intersection of Technology and Real Life

Spotlight: Your IoT Risk Is Bigger Than You Think. (And What To Do About It.)

Michael York Reading, PA Syndicated Stories, The Security Ledger

In this Spotlight edition of the podcast, we’re joined by Curtis Simpson, the Chief Information Security Officer at Armis. Curtis and I discuss the growing cyber risks posed by Internet of Things devices within enterprise networks. IoT and OT (operation technology) deployments are growing and pose challenges to organizations that are still…

Read the whole entry… »

A new variant of the Sysrv botnet has added a recent Spring Cloud Gateway vulnerability to its exploit portfolio, Microsoft warns. The Sysrv botnet has been active since at least late 2020, looking to exploit known security bugs in access interfaces in order to compromise Windows and Linux systems and install a Monero cryptominer on them. read more [...]

SonicWall Patches Unauthorized Access Vulnerability in SMA Appliances

16 May 2022

SonicWall has released patches for multiple vulnerabilities in its Secure Mobile Access (SMA) series appliances, including a high-severity issue that could lead to unauthorized access. read more [...]

CISA Removes Windows Vulnerability From 'Must-Patch' List Due to Buggy Update

16 May 2022

The US Cybersecurity and Infrastructure Security Agency (CISA) has temporarily removed a Windows flaw from its Known Exploited Vulnerabilities Catalog after it was informed by Microsoft that a recent update can cause problems on some types of systems. read more [...]

Zyxel Firewall Vulnerability Exploitation Attempts Seen One Day After Disclosure

16 May 2022

Exploitation attempts targeting a recently disclosed vulnerability affecting Zyxel firewalls started just one day after the flaw’s existence came to light. read more [...]

Hired 'Hackers' Try, and Fail, to Invade Brazil Vote System

14 May 2022

More than 20 would-be hackers gathered in the Brazilian electoral authority’s headquarters in the capital this week. Their mission: infiltrate the nation’s voting system ahead of a hotly anticipated race in October. read more [...]

A dive into Haun Ventures with the firm’s first deal lead, Sam Rosenblum

17 May 2022

Sam Rosenblum never imagined he would work at a crypto-focused investment firm. A Southern California native who spent a “large portion of my life outdoors in the sun, playing sports and hanging out with friends,” crypto was not technically a thing until he was in college at UCLA. Stints at the DOJ and as an […] [...]

Bird changes course, drops vehicle sales in pursuit of profitability

17 May 2022

Bird presented its first quarter 2022 earnings on Monday after the bell. Revenue has decreased consistently since the company went public via a special purpose acquisition merger in November last year. As a result, Bird is looking at streamlining resources so it can achieve profitability this year. Bird’s initiatives involve focusing on its most profitable […] [...]

Daily Crunch: ‘The bitcoin network is not a payments network,’ says FTX CEO Sam Bankman-Fried

16 May 2022

Hello friends and welcome to Daily Crunch, bringing you the most important startup, tech and venture capital news in a single package. [...]

Rivian founder RJ Scaringe snaps up $1M worth of EV maker’s stock

16 May 2022

Rivian founder and CEO RJ Scaringe bought 41,000 shares of company stock worth about $1 million, a securities filing posted Monday afternoon shows. The latest proxy filing, which pre-dated this purchase, shows Scaringe owns 11.99 million shares of class A stock, or about 1.3%, and 7.82 million class B common stock. He also holds 4.3 […] [...]

iOS 15.5 brings new Apple Cash update that lets you send and request money directly in Wallet

16 May 2022

Apple users can now request and send money from their Apple Cash card directly through the Wallet app with the launch of iOS 15.5. The company notes that to request or send money directly from Wallet, users can open up the app, tap on their Apple Cash card to view it, tap “request or send,” […] [...]

Max Q: Near and far

16 May 2022

Hello and welcome back to Max Q. In this issue: Astra’s long game in the small launch market The supermassive black hole at the center of the galaxy News from Virgin Orbit, SpaceX and more Don’t forget to sign up to get the free newsletter version of Max Q delivered to your inbox. Astra’s playing […] [...]

Kolkata Chai’s next cup includes a taste of venture funding

16 May 2022

Co-founded by brothers Ani and Ayan Sanyal, Kolkata Chai wants to be “the place to get good chai” in the United States. It’s a big market. The Sanyal brothers estimate the national tea market represents a $12.7 billion business per year. To chase after it, the duo tells TechCrunch that Kolkata is about to embark […] [...]

Fall Guys is going free-to-play, coming to Switch and Xbox on June 21

16 May 2022

Battle royale platformer Fall Guys: Ultimate Knockout is going free-to-play and is coming to Xbox, Nintendo Switch and the Epic Games Store on June 21, developer Mediatonic announced on Monday. The game initially launched on PlayStation and PC in August 2020 and was set to be released on Switch and Xbox last summer. A dedicated […] [...]

Ballooning US EV registrations raise opportunities for startups

16 May 2022

Surging EV adoption is certain to drive even more opportunities for startups to capitalize on the sector's growth. [...]

Prusa buys 3D-printer seller Printed Solid to expand US footprint

16 May 2022

Lots going on in the world of desktop 3D printers — that’s not a sentence I thought I’d be writing anytime soon. Days after MakerBot and Ultimaker announced merger plans, one of the companies’ most well-regarded competitors is making its own moves. Prague-based Prusa Research is acquiring Printed Solid Inc., a Delaware-based 3D-printer reseller. Founded […] [...]

Watch Out! Hackers Begin Exploiting Recent Zyxel Firewalls RCE Vulnerability

17 May 2022

Image source: z3r00t The U.S. Cybersecurity and Infrastructure Security Agency on Monday added two security flaws, including the recently disclosed remote code execution bug affecting Zyxel firewalls, to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation. Tracked as CVE-2022-30525, the vulnerability is rated 9.8 for severity and relates to a command injection flaw [...]

Researchers Find Potential Way to Run Malware on iPhone Even When it's OFF

17 May 2022

A first-of-its-kind security analysis of iOS Find My function has identified a novel attack surface that makes it possible to tamper with the firmware and load malware onto a Bluetooth chip that's executed while an iPhone is "off." The mechanism takes advantage of the fact that wireless chips related to Bluetooth, Near-field communication (NFC), and ultra-wideband (UWB) continue to operate while [...]

Fake Clickjacking Bug Bounty Reports: The Key Facts

16 May 2022

Are you aware of fake clickjacking bug bounty reports? If not, you should be. This article will get you up to speed and help you to stay alert. What are clickjacking bug bounty reports? If we start by breaking up the term into its component parts, a bug bounty is a program offered by an organization, in which individuals are rewarded for finding and reporting software bugs. These programs are [...]

Researchers Warn of "Eternity Project" Malware Service Being Sold via Telegram

17 May 2022

An unidentified threat actor has been linked to an actively in-development malware toolkit called the "Eternity Project" that lets professional and amateur cybercriminals buy stealers, clippers, worms, miners, ransomware, and a distributed denial-of-service (DDoS) bot. What makes this malware-as-a-service (MaaS) stand out is that besides using a Telegram channel to communicate updates about the [...]

Europe Agrees to Adopt New NIS2 Directive Aimed at Hardening Cybersecurity

17 May 2022

The European Parliament announced a "provisional agreement" aimed at improving cybersecurity and resilience of both public and private sector entities in the European Union. The revised directive, called "NIS2" (short for network and information systems), is expected to replace the existing legislation on cybersecurity that was established in July 2016. The revamp sets ground rules, requiring [...]

Ukrainian Hacker Jailed for 4-Years in U.S. for Selling Access to Hacked Servers

17 May 2022

A 28-year-old Ukrainian national has been sentenced to four years in prison for siphoning thousands of server login credentials and selling them on the dark web for monetary gain as part of a credential theft scheme. Glib Oleksandr Ivanov-Tolpintsev, who pleaded guilty to his offenses earlier this February, was arrested in Poland in October 2020, before being extradited to the U.S. in September [...]

Get Lifetime Access to 2022 Cybersecurity Certification Prep Courses @ 95% Off

14 May 2022

Ever thought about working full-time in cybersecurity? With millions of unfilled jobs around, now is a great time to get into the industry. Of course, there are many different roles in this field. But all of them require the same handful of professional certifications. The 2022 Ultimate Advanced CyberSecurity Professional Certification Bundle helps you collect the full house, with five [...]

SonicWall Releases Patches for New Flaws Affecting SSLVPN SMA1000 Devices

14 May 2022

SonicWall has published an advisory warning of a trio of security flaws in its Secure Mobile Access (SMA) 1000 appliances, including a high-severity authentication bypass vulnerability. The weaknesses in question impact SMA 6200, 6210, 7200, 7210, 8000v running firmware versions 12.4.0 and 12.4.1. The list of vulnerabilities is below - CVE-2022-22282 (CVSS score: 8.2) - Unauthenticated Access [...]

Google Created 'Open Source Maintenance Crew' to Help Secure Critical Projects

14 May 2022

Google on Thursday announced the creation of a new "Open Source Maintenance Crew" to focus on bolstering the security of critical open source projects. Additionally, the tech giant pointed out Open Source Insights as a tool for analyzing packages and their dependency graphs, using it to determine "whether a vulnerability in a dependency might affect your code." "With this information, developers [...]

New Saitama backdoor Targeted Official from Jordan's Foreign Ministry

13 May 2022

A spear-phishing campaign targeting Jordan's foreign ministry has been observed dropping a new stealthy backdoor dubbed Saitama. Researchers from Malwarebytes and Fortinet FortiGuard Labs attributed the campaign to an Iranian cyber espionage threat actor tracked under the moniker APT34, citing resemblances to past campaigns staged by the group. "Like many of these attacks, the email contained a [...]

Cyber Attack Halts Production at Ag Equipment Maker AGCO Fendt

9 May 2022

A cyber attack has disrupted the operations of AGCO/Fendt, a major manufacturer of agricultural equipment, the company has ackhttps://feeds.feedblitz.com/-/41936664/0/thesecurityledgerwledged. The post Cyber Attack Halts Production at Ag Equipment Maker AGCO Fendt appeared first on The Security Ledger with Paul F. Roberts. Related StoriesFeel Good Ukraine Tractor Story Highlights Ag Cyber RiskDEF CON: Security Holes in Deere, Case IH Shine Spotlight on Agriculture Cyber RiskEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To Agriculture [...]

Feel Good Ukraine Tractor Story Highlights Ag Cyber Risk

3 May 2022

The good news? John Deere bricked expensive farm equipment taken by thieving Russian troops. The bad news: those same remote access features could be used to launch crippling, large scale attacks on US farms. The post Feel Good Ukraine Tractor Story Highlights Ag Cyber Risk appeared first on The Security Ledger with Paul F. Roberts. Related StoriesCyber Attack Halts Production at Ag Equipment Maker AGCO FendtDEF CON: Security Holes in Deere, Case IH Shine Spotlight on Agriculture Cyber RiskEpisode 235: Justine Bone of MedSec on Healthcare Insecurity [...]

Episode 237: Jacked on the Beanstalk – DeFi’s Security Debt Runs Wide, Deep

19 April 2022

The hack of Beanstalk is just the latest major compromise of a decentralized finance (DeFi) platform. In this podcast, Jennifer Fernick of NCC Group joins me to talk about why DeFi’s security woes are much bigger than Beanstalk. The post Episode 237: Jacked on the Beanstalk – DeFi’s Security Debt Runs Wide, Deep appeared first on The...Read the whole entry... »Click the icon below to listen. Related StoriesEpisode 230: Are Vaccine Passports Cyber Secure?Episode 235: Justine Bone of MedSec on Healthcare InsecurityTapping into the Power of the Security Community [...]

Episode 236: Cyberwar Takes A Back Seat In Ukraine (For Now)

6 March 2022

we sit down with Christian Sorenson, the former lead of the international cyber warfare team at US Cyber Command and CEO of cybersecurity firm, SightGain, to talk about what we’ve learned so far from Russia’s war in Ukraine, and what may be coming next. The post Episode 236: Cyberwar Takes A Back Seat In Ukraine (For Now) appeared first on ...Read the whole entry... »Click the icon below to listen. Related StoriesFeel Good Ukraine Tractor Story Highlights Ag Cyber RiskEpisode 234: Rep. Jim Langevin on Cyber Policy in an Age of Political PolarizationSpotlight: COVID, Cloud Sovereignty and Other 2022 Trends with DigiCert [...]

How to Bring the Power of No-Code Security Automation to Your Team in 2022

3 March 2022

Seven in 10 SOC analysts say they are “burned out.” Six in 10 plan to leave their job “in the next year.” Tines CEO Eoin Hinchy says https://feeds.feedblitz.com/-/41936664/0/thesecurityledger-code automation may be a way to reduce the burhttps://feeds.feedblitz.com/-/41936664/0/thesecurityledgerut and retain top talent. The post How to...Read the whole entry... »Related StoriesWhy Security Practitioners Are Unhappy With Their Current SIEMState of Modern Application Security: 6 Key Takeaways For 2022Tapping into the Power of the Security Community [...]

Why Security Practitioners Are Unhappy With Their Current SIEM

24 February 2022

In this Expert Insight, Jack Naglieri, the CEO of Panther, writes about how today’s cloud-centric and data-driven environments make the SIEM technologies of the past inadequate and demand new approaches to security monitoring. The post Why Security Practitioners Are Unhappy With Their Current SIEM appeared first on The Security Ledger with...Read the whole entry... »Related StoriesHow to Overcome Threat Detection and Response ChallengesTapping into the Power of the Security CommunityHow to Bring the Power of No-Code Security Automation to Your Team in 2022 [...]

State of Modern Application Security: 6 Key Takeaways For 2022

17 February 2022

In this Expert Insight, Harshil Parikh, CEO of Tromzo, reveals findings from the company's recent State of Modern Application Security Report, a survey of 400 appsec professionals. The post State of Modern Application Security: 6 Key Takeaways For 2022 appeared first on The Security Ledger with Paul F. Roberts. Related StoriesHow to Bring the Power of No-Code Security Automation to Your Team in 2022Tapping into the Power of the Security CommunitySpotlight: Automation Beckons as DevOps, IoT Drive PKI Explosion [...]

Episode 235: Justine Bone of MedSec on Healthcare Insecurity

14 February 2022

In this episode of the podcast (#235) Justine Bone, the CEO of Medsec, joins Paul to talk about cyber threats to healthcare organizations in the age of COVID. Justine’s firm works with hospitals and healthcare organizations to understand their cyber risk and defend against attacks, including ransomware. The post Episode 235: Justine Bone of...Read the whole entry... »Click the icon below to listen. Related StoriesFeel Good Ukraine Tractor Story Highlights Ag Cyber RiskEpisode 234: Rep. Jim Langevin on Cyber Policy in an Age of Political PolarizationTapping into the Power of the Security Community [...]

Episode 234: Rep. Jim Langevin on Cyber Policy in an Age of Political Polarization

6 February 2022

In this episode of the podcast (#234) US Representative Jim Langevin (D-RI), joins Paul to talk about the flurry of legislation passed on Capitol Hill in recent months to boost the U.S.’s cyber defenses. The post Episode 234: Rep. Jim Langevin on Cyber Policy in an Age of Political Polarization appeared first on The Security Ledger with Paul F....Read the whole entry... »Click the icon below to listen. Related StoriesFeel Good Ukraine Tractor Story Highlights Ag Cyber RiskEpisode 231: Solving the US’s Endemic Cybersecurity Worker ShortageEpisode 235: Justine Bone of MedSec on Healthcare Insecurity [...]

Tapping into the Power of the Security Community

26 January 2022

Massive growth in Zoom’s customer base as a result of the COVID 19 pandemic brought new business - but also new challenges and security requirements. Establishing a CISO Council gave those customers a voice and a seat at the table, writes CISO Jason Lee. The post Tapping into the Power of the Security Community appeared first on The Security...Read the whole entry... »Related StoriesWhy Security Practitioners Are Unhappy With Their Current SIEMState of Modern Application Security: 6 Key Takeaways For 2022Episode 230: Are Vaccine Passports Cyber Secure? [...]

Apple will let your subscription apps charge you more money without asking

17 May 2022

Illustration by Alex Castro / The Verge Apple has updated its App Store rules to make it so subscriptions can auto-renew without your explicit permission, even if the developer has raised the monthly or annual price. Before the rule change, users would have to manually opt-into a subscription renewal if it came with a price bump; now, that won’t necessarily be the case, though you’ll still be notified about the price change before it happens. Apple says it’s making the change to help avoid the situation where users unintentionally lose access to a subscription because they missed an opt-in message.… [...]

Buffalo shooting suspect reportedly shared plans on Discord

17 May 2022

Illustration by Alex Castro / The Verge The alleged gunman behind the attack in Buffalo, New York that left 10 dead and three injured on Saturday used Discord to discuss and share plans ahead of the assault, according to Bloomberg. As far back as December, the suspect is reported to have used a private server on the popular chat service to describe his intentions to carry out an attack. He later shared links to Discord logs describing his attack plan and white supremacist views, according to Bloomberg. The report says that the suspect mentioned the terrorist who attacked a mosque… [...]

MiamiCoin crypto lost 88 percent of its value in less than a year

17 May 2022

Miami, host city of the Bitcoin 2022 event we recently visited, doesn’t own or manage the MiamiCoin cryptocurrency, although the coin has enjoyed the support of Mayor Francis Suarez, who at one point suggested it raised “the possibility of being able to run a government without the citizens having to pay taxes.” Now Quartz reports that since launching on August 3rd, MiamiCoin’s value has dropped by as much as 95 percent. The CityCoin plan requires miners to acquire tokens on the Stacks (STX) blockchain that they can use to bid for MiamiCoin. The winning bidder receives 70 percent of their… [...]

Meta is testing end-to-end encryption for Quest’s VR Messenger app

16 May 2022

The test is included in software update v40. | Image: Meta Meta has been on a multiyear push with Messenger’s end-to-end encryption (E2EE) features, and it’s now starting to test E2EE messaging with its Quest VR quest headsets. With the new v40 software update, Meta is testing optional E2EE for one-on-one messages and calls in VR, according to a blog post, though it’s unclear how many people are included in the test or how to turn on the feature if you are. The test arrives alongside a bunch of other notable new features in the v40 update. There are new… [...]

DJI may be working a new FPV drone that you can fly indoors

16 May 2022

The new drone will be made for indoor flight. | Image: @DronesDeal via Twitter New leaks suggest that DJI is working on a new FPV (first-person view) drone that you can fly indoors (via Gizmodo). Reliable tipsters @DealsDrone and @OsitaLV have come forward with leaked images and details about a smaller, more compact drone that may be arriving between July and August. The drone, supposedly called Avata, will weigh 500 grams, which means users will have to register it with the Federal Aviation Administration (FAA) if they choose to fly it outside (drones that weigh more than 250 grams must… [...]

Elon Musk’s silence on how he’d moderate the Buffalo shooting livestream is deafening

16 May 2022

Aaron Jordan, of Buffalo, adds to a sidewalk chalk mural depicting the names of the people killed at a mass shooting at Tops Friendly Market in Buffalo, NY. Sunday, May 15, 2022 in Buffalo, NY. | Kent Nishimura / Los Angeles Times via Getty Images On May 14th, social media platforms found themselves scrambling to deal with a livestream video of a white supremacist terror attack. Yet the man who has been the nation’s loudest commentator on content moderation had nothing to say. Under Elon Musk’s view of content moderation, any restriction on speech beyond what the law proscribes is… [...]

Google hires former FDA digital health leader

16 May 2022

Illustration by Alex Castro / The Verge Google hired a former Food and Drug Administration leader as its new senior director of global digital health strategy. Bakul Patel spent over a decade at the FDA and most recently was the chief digital health officer of global strategy and innovation. “I am looking forward to learning from the teams in health across Google and Alphabet and helping build a unified digital health and regulatory strategy,” he wrote in a Linkedin post Monday announcing the move. Like all big tech companies, Google has pushed further into health and healthcare over the past… [...]

Our 14 favorite gadgets and hacks for working at home

16 May 2022

Illustration by Samar Haddad / The Verge From mesh networks to lap desks, here’s how The Verge’s staffers create their workspaces Continue reading… [...]

Now you can order a third round of free test kits from COVIDTests.gov

16 May 2022

Double the number of tests from the first two rounds. The US Postal Service has updated its free at-home COVID-19 test webpage, indicating that citizens can now place an order for a third round of government-provided rapid tests (h / t Alexander Tin and DrAltGov on Twitter). Compared to previous rounds, you’ll be sent double the number of tests — eight instead of four. The procedure is largely the same as it was when the US launched COVIDTests.gov in January; you go to the site, fill in your name and address, and the tests will show up in your mailbox.… [...]

Sony doesn’t want you to know that it’s donating $100K for reproductive rights

16 May 2022

Illustration by Alex Castro / The Verge Insomniac Games, which is part of Sony’s PlayStation Studios, plans to donate $50,000 to the Women’s Reproductive Rights Assistance Project (WRRAP), according to an internal email sent on May 13th by its CEO Ted Price, as reported by The Washington Post. Sony itself plans to match the donation for a total of $100,000, and employees of Insomniac can make donations through Sony’s PlayStation Cares program. Additionally, The Washington Post reports that Sony is working on plans to provide financial assistance to employees who may have to travel to other states to receive abortions… [...]

How to Order Your Free At-Home Covid-19 Tests

16 May 2022

The US government is offering 8 more at-home tests to every household. Here's how to get yours, and how to troubleshoot common problems. [...]

What’s the Deal With Synesthesia TikTok?

16 May 2022

A growing number of people on the platform claim to have a perceptual condition that lets them smell colors, see music, or taste sounds. But do they really? [...]

US Courts Are Coming After Crypto Exchanges That Skirt Sanctions

16 May 2022

A newly unsealed opinion is likely the first decision from a US federal court to find that cryptocurrencies can't be used to evade sanctions. [...]

Feds Warn Employers Against Discriminatory Hiring Algorithms

16 May 2022

As AI invades the interview process, the DOJ and EOCC have provided guidance to protect people with disabilities from bias. [...]

Our Favorite Audiophile-Grade Gear for Serious Listening

16 May 2022

Ready to get the best sound quality of your life? From speakers and headphones to streaming amps, here are our favorite tools for gold-plated listening. [...]

Slow Internet? Here’s How to Run a Wi-Fi Speed Check

16 May 2022

Diagnose connectivity issues on your computer, smartphone, or game console. [...]

In Memoriam: Forgetting Your Password

16 May 2022

In our passwordless future, we'll lose the frustration—and freedom—of getting locked out. [...]

Amazon Has Too Many Warehouses. Now Sellers Are Paying More

16 May 2022

Sellers keep getting hit with fee increases—at a time when shelves are sitting empty. [...]

The Bad Times Are Coming for Startups

16 May 2022

A spate of layoffs is just the first sign of trouble for early-stage companies facing an economic downturn. [...]

The Post-Roe Battleground for Abortion Pills Will Be Your Mailbox

16 May 2022

If regulation of abortion access falls to the states, it will unleash legal havoc over pregnancy-ending medications that are shipped across state lines. [...]

Spotlight: Your IoT Risk Is Bigger Than You Think. (And What To Do About It.)

Related Stories

Related Posts

Google Chrome updates failing on Android devices in Russia

62% of Surveyed Organizations Hit By Supply Chain Attacks in 2021

What Do Financial Institutions Need to Know About the SEC’s Proposed Cybersecurity Rules?