Germany sinkholes BadBox malware pre-loaded on Android devices

December 13, 2024 at 10:22AM Germany’s Federal Office for Information Security (BSI) has successfully disrupted the BadBox malware operation, which was pre-loaded in more than 30,000 Android IoT devices sold in the country. This action aims to enhance cybersecurity for affected devices and protect users from potential threats. **Meeting Takeaways:** 1. **Disruption of BadBox Malware**: … Read more

I-O Data Confirms Zero-Day Attacks on Routers, Full Patches Pending

December 5, 2024 at 11:53AM I-O Data confirmed critical vulnerabilities in its routers, allowing remote attackers to disable firewalls and execute commands. Full patches will take weeks. Three flaws—CVE-2024-45841, CVE-2024-47133, and CVE-2024-52564—pose risks of information disclosure and command execution. A partial fix is available, with complete solutions expected by December 2024. ### Meeting Takeaways 1. … Read more

Millions of IoT Devices at Risk from Flaws in Integrated Cellular Modem

May 10, 2024 at 06:37PM Millions of IoT devices utilizing Cinterion modems are vulnerable to multiple severe vulnerabilities, according to research conducted by Kaspersky. Telit, the modem vendor, has only partially addressed the flaws. The most critical threat allows remote attackers to execute arbitrary code and poses a significant risk to various industries. Recommended mitigation … Read more

Ho, Ho, Hoooold on a Minute: A New Year Resolution That IoT Isn’t a Gift That Keeps on Taking

January 16, 2024 at 11:12AM The Internet of Things (IoT) devices offer great power and convenience, but also pose security and privacy risks. When purchasing IoT devices, it’s important to consider the company’s reputation, country of origin, security measures, and data privacy policies. Additionally, for healthcare-related IoT devices, it’s crucial to scrutinize data handling and … Read more

Coming Soon to a Network Near You: More Shadow IoT

January 11, 2024 at 10:41AM Former Microsoft product head Panos Panay has left to lead Amazon’s product division, aiming to enhance their device ecosystem, including Alexa, Echo, and Fire TV. The rising number of IoT devices presents security concerns, especially as consumer devices infiltrate commercial networks. Amazon’s plans to expand its device range could compound … Read more

Somebody Just Killed the Mozi Botnet

November 3, 2023 at 02:46PM The Mozi botnet, once the most prolific in the world, has been effectively shut down by a kill switch triggered in August. The botnet, which enabled Distributed Denial of Service (DDoS) attacks and compromised Internet of Things (IoT) devices, is now largely non-functional. Researchers speculate that the creators or the … Read more

Hackers earn over $1 million for 58 zero-days at Pwn2Own Toronto

October 27, 2023 at 03:04PM The Pwn2Own Toronto 2023 hacking competition concluded with security researchers earning $1,038,500 for 58 zero-day exploits targeting mobile and IoT devices. The Samsung Galaxy S23 was hacked four times, while no teams attempted to hack the Apple iPhone 14 and Google Pixel 7. Team Viettel emerged as the winner, followed … Read more