Sicurezza

Don’t worry about shadow IT. Shadow IoT is much worse.

Pubblicato il

For years, IT departments have been railing about the dangers of shadow IT and bring-your-own-device. The worry is that these unauthorized practices bring risks to corporate systems, introducing new vulnerabilities and increasing the attack surface. That may be true, but it’s not the whole story. As I’ve long argued, shadow IT may increase risks, but […]

Sicurezza

Microsoft finds Russia-backed attacks that exploit IoT devices

Pubblicato il

The STRONTIUM hacking group, which has been strongly linked by security researchers to Russia’s GRU military intelligence agency, was responsible for an IoT-based attack on unnamed Microsoft customers, according to the company. a blog post from the company’s security response center issued Monday. Microsoft said in a blog that the attack, which it discovered in […]

Sicurezza

Is your enterprise software committing security malpractice?

Pubblicato il

Back when this blog was dedicated to all things Microsoft I routinely railed against the spying aspects of Windows 10. Well, apparently that’s nothing compared to what enterprise security, analytics, and hardware management tools are doing. An analytics firm called ExtraHop examined the networks of its customers and found that their security and analytic software […]

Sicurezza

Remote code execution is possible by exploiting flaws in Vxworks

Pubblicato il

Eleven zero-day vulnerabilities in WindRiver’s VxWorks, a real-time operating system in use across an advertised 2 billion connected devices have been discovered by network security vendor Armis. Six of the vulnerabilities could enable remote attackers to access unpatched systems without any user interaction, even through a firewall according to Armis. About IoT: The vulnerabilities affect […]

Sicurezza

When it comes to the IoT, Wi-Fi has the best security

Pubblicato il

When it comes to connecting internet of things (IoT) devices, there is a wide variety of networks to choose from, each with its own set of capabilities, advantages and disadvantages, and ideal use cases. Good ol’ Wi-Fi is often seen as a default networking choice, available in many places, but of limited range and not […]

Sicurezza

7 steps to enhance IoT security

Pubblicato il

One of the biggest concerns with the Internet of Things (IoT) is making sure networks, data, and devices are secure. IoT-related security incidents have already occurred, and the worries among IT, security and networking managers that similar events will take place are justified. “In all but the most restrictive environments, you’re going to have IoT […]

Sicurezza

Report: Mirai tries to hook its tentacles into SD-WAN

Pubblicato il

Mirai – the software that has hijacked hundreds of thousands of internet-connected devices to launch massive DDoS attacks – now goes beyond recruiting just IoT products; it also includes code that seeks to exploit a vulnerability in corporate SD-WAN gear. That specific equipment – VMware’s SDX line of SD-WAN appliances – now has an updated […]

Sicurezza

Report: Mirai tries to wrap its tentacles around SD-WAN

Pubblicato il

Mirai – the software that has hijacked hundreds of thousands of internet-connected devices to launch massive DDoS attacks – now goes beyond recruiting just IoT products; it also includes code that seeks to exploit a vulnerability in corporate SD-WAN gear. That specific equipment – VMware’s SDX line of SD-WAN appliances – now has an updated […]

Sicurezza

IoT security vs. privacy: Which is a bigger issue?

Pubblicato il

If you follow the news surrounding the internet of things (IoT), you know that security issues have long been a key concern for IoT consumers, enterprises, and vendors. Those issues are very real, but I’m becoming increasingly convinced that related but fundamentally different privacy vulnerabilities may well be an even bigger threat to the success […]

Sicurezza

Free course – Ethical Hacking: Hacking the Internet of Things

Pubblicato il

IoT devices are proliferating on corporate networks, gathering data that enables organizations to make smarter business decisions, improve productivity and help avoid costly equipment failures, but there is one big downside – security of the internet of things remains a problem. It makes sense, then, for enterprises to try to spot vulnerabilities in the IoT […]