Poison in the Water: The Physical Repercussions of IoT Security Threats
d wager few people had ever heard of Oldsmar, Florida, prior to 2021. That all changed in February when the city made headlines. The reason? An Internet of things (IoT) security incident moved into the physical world. A Tale of Lifted Lye Levels At 8 a.m. local time on February 5, 2021, an operator at…
Chinese Hackers Using Previously Unknown Backdoor
Researchers have discovered a new cyber espionage weapon they believe was developed and is used by a China-based APT group they have named SharpPanda. A previously unknown Windows backdoor enables remote access and the collection of considerable live data – but only during Chinese working hours. An ongoing campaign is targeting the Ministry of Foreign…
At Odds: The Promise vs. Operational Reality of Security Solutions
By now you’ve probably spent at least a few minutes watching “What I thought I was getting vs. what I actually got” videos. There’s the pet edition, the mature husband edition, even a personal edition – “How I thought I looked vs. how I actually looked.” You get the picture. A similar phenomenon has been…
Actively Exploited Zero-Day Found in WordPress Plugin Used by Many Online Stores
Fancy Product Designer is a premium plugin for online stores that provides users with the ability to customize products with images and PDF files uploaded from various devices. The plugin provides various other customization options as well. This week, Wordfence discovered that threat actors are targeting an unpatched critical vulnerability in Fancy Product Designer. The…
Cisco Discloses Details of macOS SMB Vulnerabilities
SMB, which stands for Server Message Block, is a protocol for sharing files, printers, and serial ports. Apple’s own SMB stack is called SMBX. Talos disclosed seven vulnerabilities found in SMBX server components and also detailed the process it used to identify them. One of the security holes was fixed silently by Apple, one was…
Swedish Public Health Agency Says Disease Database Targeted in Cyberattacks
SmiNet was shut down on Thursday, after the agency identified several attempts to gain unauthorized access to the database, but it was restored by Friday night. On Thursday, the Public Health Agency announced that it had shut down the database to prevent hacking attempts, and immediately launched an investigation into the matter. The incident was…
Emerges From Stealth to Help Companies Pursue, Disrupt Adversaries
[redacted] was founded in 2015 by Max Kelly, who serves as the company’s CEO, and John Hering. Kelly previously worked at the NSA, the US Cyber Command and at Facebook as CSO. Hering founded cybersecurity firm Lookout and served as its CEO. The San Francisco, California-based company says it has developed a platform that can help…
