firmware - Tagged - Security Boulevard The Home of the Security Bloggers Network Tue, 26 Nov 2024 15:00:42 +0000 en-US hourly 1 https://wordpress.org/?v=6.7.1 https://securityboulevard.com/wp-content/uploads/2021/10/android-chrome-256x256-1-32x32.png firmware - Tagged - Security Boulevard 32 32 133346385 QNAP’s Buggy Security Fix Causes Chaos https://securityboulevard.com/2024/11/qnap-bad-patch-richixbw/ Tue, 26 Nov 2024 14:54:57 +0000 https://securityboulevard.com/?p=2037597 Three tiny people cleaning the inside of a hard drive

RAID FAIL: NAS Maker does a CrowdStrike—cleanup on /dev/dsk/c1t2d3s4 please

The post QNAP’s Buggy Security Fix Causes Chaos appeared first on Security Boulevard.

]]> 2037597 Maintaining the Security of CPS & IoT Systems https://securityboulevard.com/2024/08/maintaining-the-security-of-cps-iot-systems/ Thu, 15 Aug 2024 18:33:08 +0000 https://www.viakoo.com/?p=12900 (Part 2 of our 3 part 2024 Summer IoT Security Series)Once a new CPS/IoT system is deployed, secured, and delivering the business value you intended it to, it’s time to focus on keeping that system operational and secured.  In working with large-scale customers across multiple verticals Viakoo has seen what works (and what doesn’t) in […]

The post Maintaining the Security of CPS & IoT Systems appeared first on Viakoo, Inc.

The post Maintaining the Security of CPS & IoT Systems appeared first on Security Boulevard.

]]> 2029763 CPS & IoT Security Starts at Deployment https://securityboulevard.com/2024/07/cps-iot-security-starts-at-deployment/ Thu, 25 Jul 2024 17:25:00 +0000 https://www.viakoo.com/?p=12898 (Part 1 of our 3 part 2024 Summer IoT Security Series) The starting point for many cyber-physical systems (IoT/OT/ICS) having security vulnerabilities is in how they are setup and managed by either an internal team or an outside service provider.  It’s an often-overlooked part of reducing corporate risk and sets the stage for ongoing vulnerability […]

The post CPS & IoT Security Starts at Deployment appeared first on Viakoo, Inc.

The post CPS & IoT Security Starts at Deployment appeared first on Security Boulevard.

]]> 2029765 ASUS Router User? Patch ASAP! https://securityboulevard.com/2024/06/asus-router-critical-update-richixbw/ Tue, 18 Jun 2024 14:45:37 +0000 https://securityboulevard.com/?p=2021854 An ASUS router, with superimposed text: “Patch ASUS ASAP”

Or junk it if EOL: Two nasty vulnerabilities need an update—pronto.

The post ASUS Router User? Patch ASAP! appeared first on Security Boulevard.

]]> 2021854 IoT Security Means Remediation Not Mitigation https://securityboulevard.com/2024/06/iot-security-means-remediation-not-mitigation/ Thu, 06 Jun 2024 02:09:53 +0000 https://www.viakoo.com/?p=12859 A topic that I recently got asked about was vulnerability mitigation for IoT systems, which shows that even within the security community there is still a belief that mitigation equals threat resolution.  For IoT systems this simply does not work for many reasons, first among them is that these IoT, OT, or ICS systems performing […]

The post IoT Security Means Remediation Not Mitigation appeared first on Viakoo, Inc.

The post IoT Security Means Remediation Not Mitigation appeared first on Security Boulevard.

]]> 2020757 ‘Pumpkin Eclipse’ — 600,000+ Rural ISP Routers Bricked Beyond Repair https://securityboulevard.com/2024/05/pumpkin-eclipse-windstream-richixbw/ Fri, 31 May 2024 17:13:21 +0000 https://securityboulevard.com/?p=2020272 A small cabin in the middle of a forest

Daft name, serious risk: Kit from ActionTec and Sagemcom remotely ruined and required replacement.

The post ‘Pumpkin Eclipse’ — 600,000+ Rural ISP Routers Bricked Beyond Repair appeared first on Security Boulevard.

]]> 2020272 RSAC 2024 Day 2: IoT Security Questions (and Answers) https://securityboulevard.com/2024/05/rsac-2024-day-2-iot-security-questions-and-answers/ Wed, 08 May 2024 18:54:35 +0000 https://www.viakoo.com/?p=12857 RSA Conference delivers in terms of interesting dialogues with other cybersecurity professionals, and this year while there is not much on the conference agenda related to IoT security there is a lot of discussion about it.  Whether it’s the UK’s Product Security law going into effect at the end of April, the growing focus by […]

The post RSAC 2024 Day 2: IoT Security Questions (and Answers) appeared first on Viakoo, Inc.

The post RSAC 2024 Day 2: IoT Security Questions (and Answers) appeared first on Security Boulevard.

]]> 2017363 Urgency on Password Management https://securityboulevard.com/2024/04/urgency-on-password-management/ Mon, 29 Apr 2024 15:58:41 +0000 https://www.viakoo.com/?p=12844 As a security professional I’d like you to consider the following scenario.  You’re constantly adding new laptops to your organization, devices that connect to your corporate networks and will hold and transit incredibly valuable and sensitive data.  All of these laptops come into your company with exactly the same password and also with administrative access […]

The post Urgency on Password Management appeared first on Viakoo, Inc.

The post Urgency on Password Management appeared first on Security Boulevard.

]]> 2016531 The Coming End of Biometrics Hastens AI-Driven Security https://securityboulevard.com/2024/02/the-coming-end-of-biometrics-hastens-ai-driven-security/ Thu, 15 Feb 2024 17:57:46 +0000 https://www.viakoo.com/?p=12797 Until recently I thought we had a lot of time ahead of us to be secure in using biometrics to authenticate who I am and what I should have access to.  But then this morning I came across a story about GoldPickaxe, a app-based exploit aimed at gathering facial and other personal data that threat […]

The post The Coming End of Biometrics Hastens AI-Driven Security appeared first on Viakoo, Inc.

The post The Coming End of Biometrics Hastens AI-Driven Security appeared first on Security Boulevard.

]]> 2009015 Confessions on MFA and Security Best Practices https://securityboulevard.com/2024/01/confessions-on-mfa-and-security-best-practices/ Thu, 18 Jan 2024 02:36:51 +0000 https://www.viakoo.com/?p=12748 The last couple weeks have brought a few discussions on the topic of multifactor authentication or MFA (sometimes also referred to as 2FA or two factor authentication).  These discussions have been driven by the SEC’s X (formerly known as Twitter) account being hacked in order to goose the price of Bitcoin.  This raised a lot […]

The post Confessions on MFA and Security Best Practices appeared first on Viakoo, Inc.

The post Confessions on MFA and Security Best Practices appeared first on Security Boulevard.

]]> 2005601