Hacks & Hackers

Cisco, Fortinet confirm vulnerabilities from NSA Shadow Brokers hack

In-brief: Both Cisco Systems and Fortinet confirmed that vulnerabilities targeted by tools leaked by the previously unknown group Shadow Brokers were real. 

Podcast: Black Hat, DEF CON and building Secure Devices

In-brief: Paul Roberts talks with Marc Blackmer of Cisco Systems about the recent Black Hat and DEF CON conferences, as well as a proposal Cisco is working on a for a new, open standard for connecting use policies to intelligent devices. 

One in Five Vehicle Vulnerabilities are ‘Hair on Fire’ Critical

In-brief: One of every five software vulnerabilities discovered in vehicles in the last three years are rated “critical” and are unlikely to be resolved through after the fact security fixes, according to an analysis by the firm IOActive. 

Hack of Dems Wider Than Believed |The New York Times

In-brief: The attack on the Democratic National Committee was part of a larger operation against more than 100 Democratic Party officials and affiliated groups, The New York Times is reporting.

Security of seismic sensor grid probed – BBC News

The BBC reports that thousands of seismic sensors monitoring geological activity are vulnerable to manipulation by way of cyber attack, though the seismic gear maker disputes the researchers’ findings. The poor security controls around the way the sensors transmit data were detailed in a presentation at the Def Con hacker convention. Researchers found ways to fool and overload sensors so monitoring systems would get wildly inaccurate readings.The findings have been reported to the US computer emergency organisation (sp) that oversees national infrastructure. Nanometrics, the company that makes the sensor system that was probed disputed the researchers’ findings. Source: Security of seismic sensor grid probed – BBC News