Collaborate Disseminate
How to use the Shodan search engine to secure an enterprise’s internet presence, Apache access vulnerability could affect thousands of applications, vulnerable controllers could allow attackers to manipulate marine diesel engines, & ICS Secur… Continue reading Shodan, Apache, ICS, and Controllers – Paul’s Security Weekly #579
Concerns over data privacy and security push California to roll out the first legislation on connected devices. Continue reading Calif. Law Takes Aim at Weak IoT Passwords
Firmware used in up to 800,000 CCTV cameras open to attack thanks to buffer overflow zero-day bug. Continue reading Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras
By Waqas
Data management software companies are mandatorily believed to be having perfectly capable of managing their own data. However, it turns out that some companies, the most popular ones too, struggle to do so. The well-known cloud data managemen… Continue reading Cloud data management firm exposes database with over 440M emails & IP addresses
The data-management firm’s customer database held names, email addresses, some IP addresses and more: a wealth of ammo for phishers. Continue reading Veeam leaves MongoDB database wide open, exposes 445m records
With access control disabled, other people could download previous print files, or even maliciously damage the printer. Continue reading Thousands of unsecured 3D printers discovered online
Babysitting-booking app Sitter “temporarily” exposed the personal data of 93,000 account holders, according to a researcher who recently discovered the trove of data using the Shodan Internet of Things (IoT) search engine. Continue reading Babysitting app suffers ‘temporary data breach’ of 93,000 users
A new week, a new crop of security stories. Last week, U.S. Military ‘Reaper Drone’ Designs, Eavesdropping on mobile devices, Making security priority and Multifactor authentication adoption made the headlines. In addition, we discussed why that XKCD … Continue reading Security Boulevard’s 5 Most Read Stories for the Week, August 06-10
A recent hack of an Air Force captain assigned to the 432nd Aircraft Maintenance Squadron at Creech Air Force Base, Nevada, and the subsequent offer for sale of the “Reaper Drone” design via the dark web for less than $200 has caught the attention of … Continue reading For Sale: U.S. Military ‘Reaper Drone’ Designs
The hacker tried selling the US military files for $150 on the dark web, but only undercover analysts paid any attention. Continue reading Default router password leads to spilled military secrets