Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News

12/13/2019
10:00 AM
John Klossner
John Klossner
Cartoon Contest

Cartoon: Bring IOT to Work

Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
jrig1842
50%
50%
jrig1842,
User Rank: Strategist
1/6/2020 | 11:52:19 AM
Cubicle Rivalry Unchecked
Yeah, but just wait 'till you see what I bring in for IIOT day
bina
100%
0%
bina,
User Rank: Strategist
1/6/2020 | 11:19:32 AM
AMAZON
"All of my phone searches turned into purchases!"
matthewkmiller
50%
50%
matthewkmiller,
User Rank: Strategist
12/24/2019 | 10:28:29 AM
Not Compatible
I don't have an Internet enabled refridgerator, car or washing machine yet so I can't control them remotely. Fido? I don't have a doggie cam either.
acampbell448
50%
50%
acampbell448,
User Rank: Strategist
12/20/2019 | 3:30:34 PM
Guard Dog security!
They said we need to secure all the IOT so I'm bringing Fido work now......
StephenP787
50%
50%
StephenP787,
User Rank: Strategist
12/18/2019 | 3:01:57 PM
OFF-SITE BACKUPS
These are part of my DR with off-site backups for all my IOT.
GE3K
50%
50%
GE3K,
User Rank: Apprentice
12/17/2019 | 9:38:38 AM
IoT Devices
I thought they said I could use the WiFi, so I brought all my IoT devices that needed updates...
acampbell448
50%
50%
acampbell448,
User Rank: Strategist
12/16/2019 | 3:19:33 PM
BYOD
I've heard of Bring Your Own Device, but this might be taking it too far!
EJ Carroll
100%
0%
EJ Carroll,
User Rank: Strategist
12/16/2019 | 12:02:46 PM
Re: No Hackers Here
"All of my smart devices are lined up to take my job.  Sparky is here for emotional support."
LUBnickuf4
50%
50%
LUBnickuf4,
User Rank: Apprentice
12/14/2019 | 7:56:43 PM
Check it out
"Sorry, you can't check out the kitchen sink. Fred up in Applications has it until 2:30."
Dredger23
67%
33%
Dredger23,
User Rank: Strategist
12/13/2019 | 1:54:49 PM
No Hackers Here
Security said the best way to protect your interet connectable devices was to keep them close to you.
Mobile Banking Malware Up 50% in First Half of 2019
Kelly Sheridan, Staff Editor, Dark Reading,  1/17/2020
Active Directory Needs an Update: Here's Why
Raz Rafaeli, CEO and Co-Founder at Secret Double Octopus,  1/16/2020
Google Lets iPhone Users Turn Device into Security Key
Kelly Sheridan, Staff Editor, Dark Reading,  1/15/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
How Enterprises are Attacking the Cybersecurity Problem
How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-16270
PUBLISHED: 2020-01-22
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.
CVE-2018-16271
PUBLISHED: 2020-01-22
The wemail_consumer_service (from the built-in application wemail) in Samsung Galaxy Gear series allows an unprivileged process to manipulate a user's mailbox, due to improper D-Bus security policy configurations. An arbitrary email can also be sent from the mailbox via the paired smartphone. This a...
CVE-2018-16272
PUBLISHED: 2020-01-22
The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack of its D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.
CVE-2019-10780
PUBLISHED: 2020-01-22
BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open.
CVE-2019-10781
PUBLISHED: 2020-01-22
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.