Threatpost – An unpatched buffer overflow flaw allows remote attackers to completely take over the device and enter the home network.
A vulnerability in a popular Wi-Fi–connected electric outlet for smart homes would allow a remote attacker to take over smart TVs and other devices, as well as execute code – potentially exposing tens of thousands of consumers to cryptomining, ransomware, information disclosure, botnet enslavement and more.
ZDNet – Vulnerabilities have been discovered in multiple versions of Philips cardiovascular imaging devices. According to a security advisory from the US Department of Homeland Security’s ICS-CERT, the first vulnerability, CVE-2018-14787, is a high-severity flaw which affects the Philips IntelliSpace Cardiovascular and Xcelera IntelliSpace Cardiovascular (ISCV) products.
Asgardia – Satellite communication systems (SATCOMs) allow us to send and receive information from around the world; they are the power behind our internet, TVs, phones, radios, military operations, and more. Currently, there are over 2,000 communications satellites orbiting our planet, and as per the cybersecurity company IOActive, they are scarily easy to hack.
Naked Security – IOActive’s researcher Ruben Santamarta is the sort of person anyone interested in computer security would probably enjoy sitting next to on a long flight.
Take the journey he made last November between Madrid and Copenhagen on Norwegian during which (naturally) he decided to use Wireshark to study the aircraft’s in-flight Wi-Fi.
Internet of Business – Last week was a bad one for the cybersecurity sector, according to security experts at the DEF CON and Black Hat conferences. Chris Middleton rounds up the latest batch of reports.
Cybersecurity companies’ reliance on artificial intelligence (AI) and machine learning is introducing new types of automated security risk, an industry insider has warned.
Fox News – It sounds incredible: the ability to tap into a commercial airliner’s on-board systems as it flies thousands of meters over head. But a cyber expert is telling a security conference he’s managed to do just that — hundreds of times.
Tru News – Audience members at last week’s Black Hat USA 2018 cybersecurity conference learned the satellite communications used by ships, planes, and the military can easily be hacked, turning antennae into microwave oven-like weapons.
ExtremeTech – It sounds like the stuff of sky beams and science fiction because for many years it was. In movies and on TV, satellites are regularly hacked to perform dastardly deeds. But at Black Hat this week, researchers have shown a number of methods of launching real attacks against SATCOM systems. Four years ago, these attacks were merely theoretical proof-of-concepts. Today, at Black Hat 2018, they aren’t.
SiliconANGLE – In the heat of the desert summer, when the annual cybersecurity circus known as Black Hat comes to Las Vegas, no industry or technology is safe. Flaws are found, vulnerabilities are identified, fixes are issued (or not) and life in the digital world goes perilously onward.
eWEEK – Today’s topics include IOActive announcing research showing embedded systems exposing airlines to risk, and Arista agreeing to pay Cisco Systems $400 million in a patent settlement.
According to IOActive researchers, multiple systems on modern airliners are potentially at risk from a series of vulnerabilities. These flaws expose supply chain risks, where an embedded software technology puts a larger platform at risk.