Software

Study: Serious Web Security Flaws Rampant on Embedded Devices

In-brief: three quarters of embedded systems that sport web interfaces tested by researchers at universities in Germany and France contained serious security vulnerabilities, according to a new study. The results raise more questions about the security of embedded devices including home routers and home surveillance cameras. 

Viewing Data From Smart TVs Used to Push Ads to All Your Screens

In-brief: Electronics maker Vizio is the latest smart television brand caught harvesting the viewing habits of its customers and selling the data to advertisers, highlighting legal loopholes that connected devices are exploiting.

Update: DHS Funding Research into secure updates for Vehicles

    In-brief: the Department of Homeland Security is putting $4 million towards to research projects aimed at securing connected cars. (Updated to add comments from Dan Massey of DHS. – PFR 11/10/2015)

Firm: Two iOS Exploits Could Qualify for $1 Million Bounty

In-brief: One team qualified for the $1 million bounty for a working, remote exploit or jailbreak for devices running Apples iOS 9 operating system, according to the security firm Zerodium. A second may also qualify for at least a partial bounty. However, Apple may only be informed of the holes at a later date. 

Security Holes in Power Analyzers More Bad News for Industry

In-brief: Software security holes in widely used industrial equipment known as “power quality analysers” (sp) could enable remote attackers to disrupt or corrupt operations at firms across industries, according to a report released by the firm Applied Risk.