Recent Posts

A Year After Mirai: Insecure Devices are still a Huge Problem

In-brief: A year after Mirai, as many as 100,000 devices, globally, may be running some version of the Mirai malware, while countless others are vulnerable to being enlisted in a Mirai-like attack. Worse: these systems may not be patched for “years,” according to the SANS Internet Storm Center. 

A Right to Repair the Internet of Things? Spear Phishing Detection and Nonstop Attacks on DVRs

In-brief: In the latest Security Ledger podcast we talk about pending right to repair laws and their impact on the Internet of Things. Also:  Facebook’s Internet Defense Prize went to a better method for spear phishing detection. We talk to a member of the winning team. And, Johannes Ullrich of The Internet Storm Center joins us to talk about a study he did to measure the frequency of attacks on a common IoT device: digital video recorders.

Episode 61: Right to Repair Laws, Detecting Spear Phishing and DVR Torture

Security Ledger’s Paul Roberts talks with Kyle Wiens of Repair.org about efforts in Massachusetts and other states to pass ‘right to repair’ laws covering a wide range of connected and Internet of Things devices. Also: Facebook awarded its $100,000 Internet Defense prize to a team from UC Berkeley that came up with a better way to spot spear phishing campaigns. And: Johannes Ullrich of The SANS Internet Storm Center talks about his experiment to see how common attacks on Internet connected Digital Video Recorders are. The results may surprise you.

McKinsey: CEOs need IoT Security Plan

In-brief: Fewer than one in five managers say their company is ready for the challenge of securing the Internet of Things, and  global consulting firm McKinsey says that CEOs need to get a plan, fast. 

A Year Later: FDA approves Software Fix for Security Flaws in Pacemakers

In-brief: The FDA as approved a software update to software security holes in pacemakers made by Abbott. But doctors and patients will have to weigh the risks of apply the patch.