Tag: critical infrastructure

Google said it would begin withdrawing trust from web sites with certificates issued by Symantec Corp.

Google Busts Symantec-Issued Certificates and Its a Big Mess

In-brief: Google’s rebuke of Symantec over its sloppy and problem-plagued certificate authority business risks upsetting some of the Internet’s biggest brands. 

In just the last week, remotely exploitable security holes cropped up in hundreds of models of IP enabled security cameras and recorders as well as a popular line of network attached storage (NAS) devices. The culprit? Shoddy firmware and lax oversight.

Merchants of Doh! Cameras, DVRs, NAS Fall Down on Security

In-brief: In just the last week, remotely exploitable security holes cropped up in hundreds of models of IP enabled security cameras and recorders as well as a popular line of network attached storage (NAS) devices. The culprit? Shoddy firmware and lax oversight by vendors. When will it end??

Dmitri Alperovitch of Crowdstrike talks with Security Ledger Editor Paul Roberts.

Podcast: Dmitri Alperovitch on Russian hacking and the future of cyber conflict

In-brief: In this Security Ledger Podcast, Editor in Chief Paul Roberts speaks with Dmitri Alperovitch about the latest trends in sophisticated cyber attacks, and how Russia’s hacking of the U.S. election and weaponization of stolen information is likely to influence the U.S. government’s response to future hacks – responses that might not take place in cyber space.

Consumer Reports said new standards will push better security and privacy protections for connected products.

Consumer Reports Publishes Draft Cyber Standard

In-brief: Consumer Reports released a draft standard for security digital devices, calling on manufacturers to secure their products and give consumers the right to repair them. 

A hidden, backdoor account affects a line of VoIP gateways made by DblTek, researchers from TrustWave found. (Image courtesy of DblTek.)

Dbl Trouble: Fix Falls Short for Backdoor in China-Made Devices

In-brief: A hidden, backdoor account affects a line of VoIP gateways made by DblTek, researchers from TrustWave found. The manufacturers fix, however, may not solve the problem.