IoT & ICS Security

QNAP’s Buggy Security Fix Causes Chaos
Richi Jennings | | automatic updates, data storage, firmware, firmware patch, firmware security, firmware update, Firmware Updates, hard disk drive, hard drive, NAS, os security updates, QNAP, QTS, RAID, Release Management, SB Blogwatch, security update, storage
RAID FAIL: NAS Maker does a CrowdStrike—cleanup on /dev/dsk/c1t2d3s4 please ...
Security Boulevard

Deepfake Fraud, Data Brokers Tracking Military Personnel
Tom Eston | | biometrics, Cyber Security, cyber threat, Cybersecurity, Data Brokers, Data Privacy, deepfake, deepfakes, Digital Privacy, Episodes, Fraud, Germany, Information Security, Infosec, Location, location data, military, pirates, Podcast, Podcasts, Privacy, Privateers, Scams, security, Strava, surveillance, technology, Weekly Edition
In Episode 356, Tom and Kevin discuss the increasing role of deepfake technology in bypassing biometric checks, accounting for 24 percent of fraud attempts. The show covers identity fraud issues and explores ...

Here’s Yet Another D-Link RCE That Won’t be Fixed
Richi Jennings | | D-Link, D-Link Corporation, D-Link vulnerability, D-Link zero day, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things cyber security, iot, SB Blogwatch
D-Licious: Stubborn network device maker digs in heels and tells you to buy new gear ...
Security Boulevard

These 20 D-Link Devices Have Critical RCE Bug — but NO Patch NEVER
Richi Jennings | | CVE-2024-10914, D-Link, D-Link Corporation, D-Link NAS Devices, D-Link vulnerability, D-Link zero day, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things cyber security, iot, NAS, network storage device, SB Blogwatch
‘Bobby’ flaw flagged WONTFIX: Company doesn’t make storage devices now; has zero interest in fixing this catastrophic vulnerability ...
Security Boulevard

Protecting Critical Infrastructure: A Collaborative Approach to Security for ICS, OT, and IIoT
In an era where cyber threats to critical infrastructure are growing in both sophistication and frequency, securing Operational Technology (OT), […] ...

Interpol Operation Shuts Down 22,000 Malicious Servers
Interpol, other law enforcement agencies, and cybersecurity firms teamed up for Operation Synergia II, shutting down 22,000 malicious servers that supported ransomware, phishing, and other attacks and arresting 41 people connected to ...
Security Boulevard

Leveraging Tabletop exercises to Enhance OT security maturity
Has your organization tested its OT security incident response plan in the last 6 months? Do you remember when you last checked your institutional OT security awareness levels? Are your OT security ...
IoT Security Failures Can Be Sh*tty
It’s hard not to see IoT security failures in the news because they can be dramatic, and this week was no different. The Register reported that in Moscow a skyscraper-high plume of ...
October Can Be Scary
Every October brings both Halloween and National Cybersecurity Awareness Month (NCSAM). Most people know about Halloween, but if you’re just coming up to speed on NCSAM here is some background. National Cybersecurity ...

How to evaluate OT security program maturity
An OT security program can lead to better resource use, improved security operations, and tangible gains for the security posture of an OT operator. The benefits of running an OT security program ...