#security flaws

[gwydionmisha]

Hack of federal court filing system exploited security flaws known since 2020

The intrusion into the federal judiciary’s case filing system was like “taking candy from a baby,” said one person with knowledge of the hac

[internutter]

Challenge #03506-I218: A Different Contraband

They worked hard to build their own custom ship. It took them a long time, and a lot of funds, and a ton of very hard work. They made sure the ship had the strongest shields and safety features they could build, and, of course, all the amenities that they, and their family and friends, could ever want or need. The first ship in their small business. What business? Smuggling Dereggers to safety. -- Anon Guest

Raymond Barnet, Security Inspector for the Regimen of the Invisible Hand knew damn well that those Alliance sorts were up to something. They were always up to something. Constantly attempting to undermine the Invisible Hand of the Truly Free Market with their namby-pamby need for "equity". Which was another world for nanny-state hand-holding soft-hearted weakness.

Trader Gorx had a smirk that Barnet hated on sight. Like he was laughing at Barnet behind his back. He was otherwise casual, handing over all the paperwork and allowing every single box, bag, and container to be scanned, searched and tested for contraband.

All. Perfectly. Legal. Unfortunately for Barnet.

[Check the source for the rest of the story]

[kazifatagar]

Kaspersky Finds Security Flaws that Threaten Vehicle Safety

Kaspersky recently revealed the findings of a comprehensive security audit that uncovered a critical vulnerability enabling unauthorised access to all connected vehicles of a leading automotive manufacturer. The investigation found that attackers could potentially compromise both the manufacturer’s internal infrastructure and the connected vehicles themselves. On the manufacturer’s side,…

Kaspersky Finds Security Flaws that Threaten Vehicle Safety

[intelligentchristianlady]

I Was Scammed Out of $130,000 — And Google Helped It Happen

On June 19th, my life changed with a phone call.

"I made mistakes, yes — but Google made decisions that turned my mistakes into a catastrophe.

Phishing emails from “@google.com” made it into Gmail.The attacker spoofed the “From” field so it looked like the emails came from @google.com — something Google’s filters should have blocked outright. On iOS, Gmail doesn’t let you view full headers, so I had no way to double-check in the moment.

Google enabled Authenticator cloud sync by default.Coinbase confirmed the attacker used my synced Authenticator codes. Without that feature, the theft would have been stopped cold."

This guy is a tech professional. It could happen to any of us.

[heather-riggins-found-diary]

BEGINNING OF FOUND DIARY

The most important kind of freedom, is to be who you really are.

We transact in are reality for a

“Role”

We trade in are sense for an

“Act”

We give up the ability to feel, in exchange to put on a

“Mask”

until there's a personal revolution on an individual level. It's got to happen inside first.

Be yourself, let people see the real imperfect flawed quirky weird beautiful person you are.

People can be so quiet about their pain that you forget that they are hurting. That's why it is so influential to be kind.

I want to THANK YOU, to the rare few individuals who suffer and deal with Depression, Self confidence, Mental issues/problems For not giving up, because you are somebody!!

This kinda world we live in now it's very rare to find people that listens without judgement, helps without entitlement, understands without pretension and will love you without conditions.

[techframework]

Is Your House at Risk of a Digital Invasion?

Due to misconfigured devices or insufficient smart home network security procedures, consumers who install smart home gadgets such as baby monitors, Ring doorbells, or surveillance systems are rapidly becoming targets for hackers.

 A Chicago family was recently hacked into their Google Nest home cameras and thermostat by a hacker.

 Arjun and Jessica Sud utilize a baby monitor to keep an eye on their 7-month-room old's on a regular basis. According to the Chicago Tribune, "they heard something terrifying through the monitor last month: a deep male voice was speaking to their child." [1]

 "The couple gathered their now fully awake son and went downstairs. They realized that their Nest thermostat, which was normally set to 72 degrees, had been pushed up to 90 degrees. The voice then returned, this time through the speaker of a downstairs surveillance camera. It was speaking to them this time."

 As more people in the United States install internet-connected smart home devices that can be controlled and monitored via a smartphone app, hackers are exploiting security flaws to breach into home networks and snoop on homeowners or use compromised devices for cybercrime.

 Following recent cyber-attacks on customers, corporations such as Amazon and Google have made smart home device security a major focus, pushing users to take home network and device security seriously to prevent becoming cyber-attack victims.

 The Security of the Internet of Things in the New Era

 Any smart gadget connected to the internet and a private home network that is not necessarily a server or personal computer, known as the "Internet of Things" or IoT, represents a new route for hackers to attack consumers in their own homes. Connected cars, smart house doorbells, and video surveillance systems are just a few examples of IoT gadgets, which also include speakers, watches, wearables, and even microwave ovens and refrigerators.

 Hackers can infiltrate even the most secure devices, such as SmartTVs. According to a Consumer Reports study, Samsung and LG televisions may be capturing their owners' private chats. [2]

 "Beyond the potential that your TV maker and app developers may be listening and watching you, that television can also be a backdoor for hackers to enter into your home," the FBI recently warned regarding SmartTV hacking. Although a malicious cyber actor may not be able to directly access your locked-down computer, it's feasible that your insecure TV will provide an easy backdoor through your router."

 According to the FBI, hackers can use insecure TVs to change channels, alter volume, broadcast unsuitable films to children, or turn on your bedroom TV's camera and microphone and cyberstalk you silently. [3]

 Google will soon require Nest customers to utilize two-factor authentication for smart home devices in response to escalating IoT cyber threats.

 "We're continually looking for new methods to protect your privacy and security while providing you control over how easy it is to access your account and what you post. After all, gadgets like cameras and smoke alarms are critical in an emergency," argues Cory Scott, Google Nest's Head of Security and Privacy. "However, adding an extra layer of security to your home gadgets provides you more control over them in the long run by ensuring that only trustworthy people and devices may use them." [4]

 Google Nest monitors IoT security in addition to two-factor authentication by checking for passwords that may have been exposed in previously-known external credential breaches, resetting accounts when suspicious activity is detected, requiring automatic updates, not allowing default or easy-to-guess device passwords, and verifying booting to prevent devices from running malicious code.

 Safety Tips for Smart Homes and IoT

 Consider the following tips to guard against IoT hackers in addition to following smart home device security requirements and manufacturer recommendations: [5]

 Check all installed IoT devices' privacy and password settings.

 Change default passwords to sentences and use non-identifiable logins, unique passwords, and multi-factor authentication.

 Limit the use and location of always-on gadgets to avoid being continually monitored, as many devices are activated by motion, voice, or other triggers.

 To prevent attacks based on known vulnerabilities, update software on all devices.

 This will prevent hackers from attempting to access devices that have not had updates installed.

 Separate your electronic devices.

 To prevent hackers from utilizing a hacked device for network access, set up a specialized IoT network or a specific IoT only wireless network at home.

 Keep an eye on your gadgets.

 On all tablets and laptops, install next-generation antivirus software, and set up a firewall between your home router and your devices.

 "Safe rooms" should be created.

 Keep smart home technology out of the areas of your home where you want them to be the safest, including bedrooms and bathrooms.

 IoT Security's Business Consequences

 Businesses, like consumers, must be attentive and incorporate IoT into their cybersecurity plans.

 Security must be a “primary priority in whatever IoT investment you make, from your doorbell to your manufacturing technology,” according to Charl van der Walt, head of security research at Orange Cyberdefense. Any compromise you make today will inevitably come back to haunt you later."

 "As more connected devices enter an organization, IT managers and decision-makers must take responsibility for enforcing appropriate segmentation, access control, and patch management protocols, as well as implementing complete, continuous visibility into their entire network infrastructure," van der Walt says. [6]

 In addition to implementing best IoT security practices, businesses should use increased device visibility and analytics to detect cyber-attacks and compromises, and then make IoT a critical component of their entire cyber security strategy.

 [1] chicagotribune.com [2] consumerreports.org [3] fbi.gov [4] blog.google [5] cnbc.com [6]information-age.com

[ezrasf]

Wordpress security for beginners

WordPress security for beginners

The Jetpack (a plug-in) blog has a pretty good WordPress Security for Beginners post which talks about what you need to do to keep your blog safe. The TL;DR: choose a good hostkeep software updated (WP, plug-ins, themes)use secure credentialsoff-site backupsprotect against brute force attacksscan for malwaremonitor for downtimeremove unused / not-maintain plug-ins or themesuse 2FA

View On WordPress