Securing the International IoT Supply Chain
July 1 2020Together with Nate Kim (former student) and Trey Herr (Atlantic Council Cyber Statecraft Initiative), I have written a paper on IoT supply chain security. The basic problem we try...
Read moreAndroid Apps Stealing Facebook Credentials
June 30 2020Google has removed 25 Android apps from its store because they steal Facebook credentials: Before being taken down, the 25 apps were collectively downloaded more than 2.34 million times....
Read moreiPhone Apps Stealing Clipboard Data
June 29 2020iOS apps are repeatedly reading clipboard data, which can include all sorts of sensitive information. While Haj Bakry and Mysk published their research in March, the invasive apps made...
Read moreFriday Squid Blogging: Fishing for Jumbo Squid
June 26 2020Interesting article on the rise of the jumbo squid industry as a result of climate change. As usual, you can also use this squid post to talk about the...
Read moreThe Unintended Harms of Cybersecurity
June 26 2020Interesting research: "Identifying Unintended Harms of Cybersecurity Countermeasures": Abstract: Well-meaning cybersecurity risk owners will deploy countermeasures (technologies or procedures) to manage risks to their services or systems. In some...
Read moreAnalyzing IoT Security Best Practices
June 25 2020New research: "Best Practices for IoT Security: What Does That Even Mean?" by Christopher Bellman and Paul C. van Oorschot: Abstract: Best practices for Internet of Things (IoT) security...
Read moreCOVID-19 Risks of Flying
June 24 2020I fly a lot. Over the past five years, my average speed has been 32 miles an hour. That all changed mid-March. It's been 105 days since I've been...
Read moreCryptocurrency Pump and Dump Scams
June 24 2020Really interesting research: "An examination of the cryptocurrency pump and dump ecosystem": Abstract: The surge of interest in cryptocurrencies has been accompanied by a proliferation of fraud. This paper...
Read moreReport on espionage attacks using LinkedIn as a vector for malware, with details and screenshots. They talk about "several hints suggesting a possible link" to the Lazarus group (aka...
Read more
Recent Comments