In-brief: One team qualified for the $1 million bounty for a working, remote exploit or jailbreak for devices running Apples iOS 9 operating system, according to the security firm Zerodium. A second may also qualify for at least a partial bounty. However, Apple may only be informed of the holes at a later date.
Recent Posts
EFF: License Plate Readers Left Vulnerable To Hackers
Automated license plate recognition (ALPR) systems, used by law enforcement to track vehicles suspected of connection connected to illegal activities, have been found vulnerable, lacking even the most basic protection against public access, the Electronic Frontier Foundation (EFF) is warning. A report published by the group this week reveals that data captured by more than 100 ALPRs sold by PIPS Technology, a company now part of 3M, could be accessed online by anyone with the correct URL. That access could allow a remote attacker to monitor license plate captures in real time. In a statement to EFF, 3M stood behind the security features of its cameras, but said that security features on the devices must be enabled by customers. “Any issues with our products are taken very seriously and directly addressed with the customer,” 3M said. ALPR devices are mobile or stationary high-speed cameras that can detect when a vehicle […]
Security Holes in Power Analyzers More Bad News for Industry
In-brief: Software security holes in widely used industrial equipment known as “power quality analysers” (sp) could enable remote attackers to disrupt or corrupt operations at firms across industries, according to a report released by the firm Applied Risk.
Android Security Undermined by OEMs
In-brief: Google’s insistence on stricter security policies with its latest release of the Android mobile operating system are being watered down by the company’s partners, who are undermining stricter OS security with weak or insecure policies and device configuration, a new report from Aalto University in Finland finds.
Realtors, OTA Publish Provisioning Checklist for Smart Homes
In-brief: smart homes aren’t just sold – they must also be ‘de-provisioned’ by the seller and ‘re-provisioned’ by the buyer. The National Association of Realtors and the Online Trust Alliance have a new checklist for doing so.