In our latest podcast: industrial security expert Joe Weiss talks to us about Triton, a new malware family targeting industrial safety systems. Also: Dave Aitel of the firm Immunity Inc. joins us again to talk about new legislation banning government agencies from using anti malware software by Kaspersky Lab. And, Alan Naumann* of the firm Contrast Security talks to us about the major insurance firm that joined the latest round of investment in his company, and why application security is everybody’s problem.
Hardware
Microsoft working on secure processor for Internet of Things | Wired
Microsoft is developing a secure processor for The Internet of Things under the banner of Project Sopris, Wired reports.
Researchers use radio to jump air gapped industrial control systems
Researchers at CyberX say they have found a way to sneak sensitive data off of industrial control system networks using radio frequency communications. The attack could be used to compromise so-called “air gapped” networks that are not connected to the Internet.
Spy Eyes In the Sky: DHS says DJI Drones spy for Chinese Government, Industry
The Department of Homeland Security is warning that commercial drones made by the China-based firm Da Jian Innovations (DJI) may be providing “U.S. critical infrastructure and law enforcement data” to the Chinese government and favored industries in that country, according to a copy of an August, 2017 Intelligence Bulletin (PDF) published by the website Public Intelligence.
Surveillance Under The Tree: Connected Device Audit Turns up Sensors, Security Holes
Sensors and security holes are common companions on a range of connected toys and consumer devices available to consumers this holiday season.