Comments
Mikko Hypponen's Vision of the Cybersecurity Future
Newest First  |  Oldest First  |  Threaded View
menuisier69
50%
50%
menuisier69,
User Rank: Apprentice
9/6/2017 | 5:15:43 AM
Re: Mikko Hypponen;s Security Talk
"Much as I respect his position, I think he is talking linearly and not laterally"

 

100% agree but Mikko Hypponen is still a genius :P
tcritchley07
50%
50%
tcritchley07,
User Rank: Strategist
9/5/2017 | 9:19:29 AM
Mikko Hypponen;s Security Talk
Much as I respect his position, I think he is talking linearly and not laterally. E,g. "I cant see SW in IOT devices". Nobody could see men landing on the moon 100 years ago be we did. IOT devices in a year or so can easily hold a 128 MB /(or GB) memory/storage and enough briains to  encrypt data and commands and to take part in a later cyber security architecture, However, the IoT manufacturers will have to toe the IoT function implementation line drawn by Goverments and businesses who carry very large sticks in the pursuit of security.

Even today, the bad guys are practising their IoT breach skills, e.g. Iranian nucclear plant, Ukraine power station, cars stopped in 'flight'  (by friendly hackers as a trial). They are an order of magnitude greater hazard than current exposures and 2 orders of magniude in number.


Is Threat Intelligence Garbage?
Chris McDaniels, Chief Information Security Officer of Mosaic451,  5/23/2018
More Than Half of Users Reuse Passwords
Curtis Franklin Jr., Senior Editor at Dark Reading,  5/24/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-14185
PUBLISHED: 2018-05-25
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal.
CVE-2018-8862
PUBLISHED: 2018-05-25
In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authentication vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.
CVE-2018-8864
PUBLISHED: 2018-05-25
In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.
CVE-2018-8871
PUBLISHED: 2018-05-25
In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution.
CVE-2017-9641
PUBLISHED: 2018-05-25
PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability.