The FBI says that BADBOX 2.0 is a malware campaign that has infected over a million home Internet-connected devices. Once infected it becomes part of hacker’s attack army. It is commonly found in Chinese smart TVs (where most of them are made) and also on streaming boxes, projectors, tablets and even your smart dishwasher. Even […]
Continue reading → [DISPLAY_ACURAX_ICONS]We have seen multiple attacks in the last few years on municipal water supplies. The good news is that none of them killed anyone. Mostly, that was just because we were lucky. A bug in a TLS certificate (used to implement HTTPS) allowed researchers to view the water system control panel in hundreds of public […]
Continue reading → [DISPLAY_ACURAX_ICONS]CISA issued guidance this week to reduce cyber risk. The guidance is very simple: DOES THIS HAVE TO BE OPEN TO THE INTERNET? Of course, you have to know where all of your assets are. This includes by IT and OT (Internet of Things and Industrial Internet of Things) devices. Here are CISA’s yardsticks to […]
Continue reading → [DISPLAY_ACURAX_ICONS]It is important to remember that the agency’s budget proposal is just that, a proposal, and Congress may or may not agree to it. So what is in the proposal? Whether Congress agrees with the agency or not is to be seen, but if they do, you can draw your own conclusion as to the […]
Continue reading → [DISPLAY_ACURAX_ICONS]I understand that the government needs to save money. There probably is enough waste to fund a small country. Or many a bigger one. But are we doing that wisely? CISA, which is the key agency to protect civilian government agencies, especially now with all of the layoffs and which is also the agency directed […]
Continue reading → [DISPLAY_ACURAX_ICONS]CISA is warning businesses that SaaS providers are under attack as a way to steal their customers’ credentials. If you think about this, it makes sense. This came after Commvault, a cloud-based backup solution, was compromised using a zero-day. What is interesting is how they planned to exploit the vulnerability. Commvault claims that no customer data in […]
Continue reading → [DISPLAY_ACURAX_ICONS]