FTC pushed from Hill on hacking of smart toys, kids’ privacy

Federal cybersecurity and privacy protections for children are not keeping up with the burgeoning data collection engaged in by “smart” toys and online games, Sen. Mark Warner said Monday, asking the Federal Trade Commission if the law needs to be changed. In a letter to acting FTC Chairwoman Maureen Ohlhausen, the senator says he’s concerned the agency is soft-pedaling the dangers the Internet of Things might pose for children, citing a speech she gave earlier this year. “Reports of your statements casting these risks as merely speculative — and dismissing consumer harms that don’t pose “monetary injury or unwarranted health and safety risks” — only deepen my concerns,” the Virginia Democrat wrote. He cites the recent example of CloudPets, a product from Spiral Toys that’s marketed as “a message you can hug.” The company turned out to be storing users’ personal data in an insecure, public-facing online database — reportedly exposing over 800,000 customer logins and passwords and more than 2 million voice recordings […]

The post FTC pushed from Hill on hacking of smart toys, kids’ privacy appeared first on Cyberscoop.

Continue reading FTC pushed from Hill on hacking of smart toys, kids’ privacy

Threatpost News Wrap, March 3, 2017

The news of the week is recapped, including the fallout around CloudBleed, the CloudPets breach, and a Slack token bug. The life of Howard Schmidt is also remembered. Continue reading Threatpost News Wrap, March 3, 2017

Children’s Voice Messages Leaked in CloudPets Database Breach

Voice messages from children sent through an internet-connected toy called CloudPets were stolen from an exposed MongoDB database, which has been wiped clean and the data held for ransom. Continue reading Children’s Voice Messages Leaked in CloudPets Database Breach

How This Internet of Things Stuffed Animal Can Be Remotely Turned Into a Spy Device

More bad news for toymaker Spiral Toys, which left customer data from its “CloudPets” brand exposed online. Continue reading How This Internet of Things Stuffed Animal Can Be Remotely Turned Into a Spy Device

Internet-connected teddy bear company hacked; 2 million parent-child voice messages held ransom

A company selling internet-connected stuffed toys used by kids and parents to send voice messages to one another leaked 800,000 user account credentials and 2 million message recordings, according to security researcher Troy Hunt. The data was hacked, locked and held for ransom. Researchers and journalists have been trying to reach the company, Spiral Toys, since late last year […]

The post Internet-connected teddy bear company hacked; 2 million parent-child voice messages held ransom appeared first on Cyberscoop.

Continue reading Internet-connected teddy bear company hacked; 2 million parent-child voice messages held ransom

Internet of Things Teddy Bear Leaked 2 Million Parent and Kids Message Recordings

A company that sells “smart” teddy bears leaked 800,000 user account credentials—and then hackers locked it and held it for ransom. Continue reading Internet of Things Teddy Bear Leaked 2 Million Parent and Kids Message Recordings