penetration testing Archives

Episode 79: Hackable Nukes and Dissecting Naughty Toys

January 15, 2018 Paul Roberts

In this week’s Security Ledger Podcast episode, the UK -based policy think tank Chatham House warned last week that aging nuclear weapons systems in the U.S., the U.K. and other nations are vulnerable to cyber attacks that could be used to start a global conflagration. We talk with Eddie Habbibi of PAS Global about what can be done to secure hackable nukes. Also: with CES raging in Las Vegas last week, we go deep with security researcher Jay Harris on flaws in connected toys being sold to children.

Update: WHISTL Labs will be Cyber Range for Medical Devices

July 24, 2017 Paul Roberts

In-brief: A global federation of labs will test the security of medical devices, according to an announcement on Monday by a consortium of healthcare industry firms, universities and technology firms. (Updated with comments from Dr. Nordenberg. PFR 7/25/2017)

Podcast – Smart Vehicle Security: A Report from the Lab

May 31, 2017 Paul Roberts

In-brief: In this Security Ledger podcast, Paul speaks with Sameer Dixit of Spirent Security Labs, a leading tester of connected (“smart”) vehicles. Truly secure, connected vehicles may be years away, he says. In the meantime, security flaws and poorly implemented features are a major issue, Dixit says, with many car companies still preferring bolt on security fixes over secure design.

Targeting Internet of Things: Metasploit Tool Adds Wireless Device Detection

March 21, 2017 Paul Roberts

In-brief: The Metasploit Framework has a new extension to test for wireless devices that communicate over radio frequency (RF), Bluetooth and other protocols.

Survey: Hackers for Hire Find Most Networks Easy Prey

February 10, 2017 Paul Roberts

In-brief: A survey of penetration testers by Rapid7 finds most organizations are failing to detect malicious activity on their networks.