Security News For The Week Ending August 19, 2022

Defcon Hacker Hacks Deere Tractor to Play Doom

The right to repair folks and some manufacturers have been at odds for years regarding right to repair. John Deere has really be anti-right. This year a researcher demoed hacking a tractor and getting it to play Doom on the main display. Credit: Hackread

Monero Developers “Fork” Code to Make it More Private

Monero is one of many very popular cryptocurrencies, but unlike Bitcoin, it is much harder to trace transactions. This past Saturday the developers ‘forked’ the blockchain at block 2, 688,888 to add new features to make it more secure and more private. People who want to continue to use Monero will need to update their software and/or hardware wallets. Credit: Bleeping Computer

Researchers Lock and Unlock Doors Remotely – Not Ones They Own

We are seeing more and more IoT attacks and people seem to love those cute gizmos, so expect more attacks. In this case it is a business-class product, made by the badge access giant HID and sold by Carrier. Researchers found 8 vulnerabilities in the LNL-4420 control panel, allowing them to unlock doors at will and lock them behind the crooks, leaving no obvious trail. If the security cameras are on the same system, they could turn those off as well. This is the so-called digital-physical attack. They would have to get on the company’s network somewhere, but that is a pretty low bar. Credit: Vice

Crooks Hack Consumers’ Brokerage Accounts in Pump ‘n’ Dump Scheme

The SEC says that some hackers broke into consumers’ brokerage accounts to make large purchases of sketchy stocks. This caused the prices to go up, at which point they sold shares of the stocks that they already owned, earning them over a million bucks. And a day in court. Credit: The Register

59% of Those Surveyed Plan on Government Bailout in Case of Cyberattack

The percentage of companies with cyber insurance is much lower than expected (55%) and many only have a little bit of insurance. On top of this, 59 percent are hoping the government will bail them out in case of some cyberattacks, even though there is no evidence that the government plans to do this. Credit: The Register

by