Content by Jeremy Kirk

More Than 1,000 IoT Security Guidelines: Which One to Use?

Jeremy Kirk  •  July 7, 2020

With more than 1,000 IoT security guidelines, recommendations and best practices, which ones should an organization follow? Researchers at Carleton University in Canada say 91 percent of the guides are outcome-based, which are not necessarily easy for manufacturers to follow.

Hey Alexa. Is This My Voice Or a Recording?

Jeremy Kirk  •  July 6, 2020

Voice-controlled assistants can be fooled by replaying a recording of someone's voice. But researchers with Australia's Commonwealth Scientific and Industrial Research Organization and Samsung Research say they've developed a lightweight software tool to detect such attempts, which are difficult to defend against.

Securing the Work-From-Home Workforce

Jeremy Kirk  •  June 30, 2020

The COVID-19 pandemic has introduced new risks for enterprises as employees access corporate networks and applications from home. Sudip Banerjee of Zscaler says that cloud security solutions offer advantages over VPNs.

Japan's IoT Scanning Project: Insecure Devices Found

Jeremy Kirk  •  June 29, 2020

Japan has been scanning its entire IPv4 address space to find insecure home routers, web cameras and sensors. The results are encouraging, and the country's program could serve as a model for other nations aiming to avoid large-scale IoT security problems.

How Amazon and Walmart Could Fix IoT Security

Jeremy Kirk  •  June 26, 2020

IoT devices can be made cheaply and quickly. But as a result, they may lack adequate security features. The Atlantic Council is proposing regulations that would require technology retailers to sell devices that meet security standards, which would, in turn, put pressure on IoT component makers.

Connected Devices and Security: Where Do We Stand?

Jeremy Kirk  •  June 25, 2020

Without labelling or standards, consumers and enterprises face challenges when buying IoT devices. Brad Ree of the ioXt Alliance describes work underway to harmonize the security environment.

Microsoft's CyberX Acquisition: Securing IoT and OT

Jeremy Kirk  •  June 23, 2020

Integrating IoT devices into OT systems brings a raft of security concerns. Microsoft's acquisition of CyberX, which offers a specialized IoT/OT security platform, may give some organizations more confidence to tackle what can be a messy business of securing and monitoring IoT controls across a network.

Smart Devices: How Long Will Security Updates Be Issued?

Jeremy Kirk  •  June 22, 2020

If you've managed to equip your home with smart devices and appliances that work properly, you probably think you're all set. But there are no regulations around how long manufacturers must provide security updates, which could mean a smart device could become a risk.

Coming Soon: 'Trust Mark' Certification for IoT Devices

Jeremy Kirk  •  June 18, 2020

An Australian IoT alliance is developing a certification program designed to raise security standards for connected device manufacturers and give consumers more confidence that they're buying secure devices. The program, slated to start in September, could expand globally.

Millions of Connected Devices Have Exploitable TCP/IP Flaws

Jeremy Kirk  •  June 17, 2020

Time for another internet of things update nightmare: Researchers have found that a little-known but widely used TCP/IP software library built into millions of internet-connected devices has 19 flaws that need fixing. Developer Treck has issued fixes, but how many vulnerable devices will end up patched?

Delivery Hero Confirms Foodora Data Breach

Jeremy Kirk  •  June 15, 2020

Delivery Hero, the online food delivery service, has confirmed a data breach of its Foodora brand. Breached information includes personal details for 727,000 accounts - names, addresses, phone numbers, precise location data and hashed passwords - in 14 countries.

IoT Privacy and Security: Will Product Labels Help Buyers?

Jeremy Kirk  •  June 9, 2020

With internet connectivity getting added to an increasing number of products, privacy and security risks abound. But buyers may be unaware. A team of Carnegie Mellon University researchers aims to change that, by clear labeling of connected devices and the risks they may pose.

Survey: Security Concerns Slow Down IoT Deployments

Jeremy Kirk  •  June 3, 2020

Worries over ransomware and malware are slowing down enterprise IoT deployments, which is a reflection of the reputational and customer relationship risks at stake, according to a new survey. Here's what enterprises need to keep in mind when selecting security technology for IoT.

Capital One Must Turn Over Mandiant's Forensics Report

Jeremy Kirk  •  May 29, 2020

A federal judge has ordered Capital One to turn over a forensics report covering its 2019 data breach, which has been sought by plaintiffs in a class action lawsuit. The report, if it becomes public, could shed light on one of last year's biggest breaches.

Researcher Contends Trend Micro's RootkitBuster Busted

Jeremy Kirk  •  May 28, 2020

Last week, security researcher Bill Demirkapi said that Trend Micro used a trick to get one of its drivers to pass Microsoft's approval process. Trend Micro has withdrawn the driver and says it's working with Microsoft on incompatibility issues that are unrelated to the researcher's findings.