Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Get Serious about IoT Security
Threaded  |  Newest First  |  Oldest First
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
9/20/2017 | 1:50:59 PM
Of interest
I have a wireless defibulator inside of me - made by Boston Scientific.  Ir regularly posts condition status to a wireless receiver in my kitchen attached to a phone.  Seems simple enough but consider this as an IoT device, i wonder just what related data is transmitted and what can be associated with it upon reception.  One has to trust that somewhere in Emory Hospital the walls are rather well up (one never knows) but .,,,,, so long as a hacker does not turn me OFF????
cybersavior
50%
50%
cybersavior,
User Rank: Strategist
9/20/2017 | 2:19:53 PM
Re: Of interest
That is precisely why doctors disabled the wireless function in Dick Cheney's pacemaker.  To thwart hackers killing him.
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
9/20/2017 | 2:33:30 PM
Re: Of interest
Politics aside, good reason to disable that on a "pacemaker" --- my defib is a close cousin but not so much of a threat in that regard.  Still, shows the significance above on a wireless pacemarker as an IoT device used in important public people.  
ademarr
50%
50%
ademarr,
User Rank: Apprentice
9/27/2017 | 8:39:55 AM
CompTIA exam dumps
Braindumpskey's CompTIA modules are very simple and anyone can understand them easily. The company believes in details described in a brief way. The CAS-002 Dumps [https://www.braindumpskey.com/exam/CAS-002.html] practice modules are available as software, and as CAS-002 PDF [https://www.braindumpskey.com/exam/CAS-002.html] that's easy to read.
jasminsmith
50%
50%
jasminsmith,
User Rank: Apprentice
8/21/2019 | 6:13:12 AM
Pending Review
This comment is waiting for review by our moderators.


GitHub Named in Capital One Breach Lawsuit
Dark Reading Staff 8/14/2019
The Mainframe Is Seeing a Resurgence. Is Security Keeping Pace?
Ray Overby, Co-Founder & President at Key Resources, Inc.,  8/15/2019
The Flaw in Vulnerability Management: It's Time to Get Real
Jim Souders, Chief Executive Officer at Adaptiva,  8/15/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-5034
PUBLISHED: 2019-08-20
An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this vuln...
CVE-2019-5035
PUBLISHED: 2019-08-20
An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force a pairing code, resulting in greater Weave access and potentially full device control. An attacker c...
CVE-2019-5036
PUBLISHED: 2019-08-20
An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close, resulting in a denial of service. An attacker can send a specially cr...
CVE-2019-8103
PUBLISHED: 2019-08-20
Adobe Acrobat and Reader versions, 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2017.011.30142 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation ...
CVE-2019-8104
PUBLISHED: 2019-08-20
Adobe Acrobat and Reader versions, 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2017.011.30142 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation ...