Software Vulnerabilities in the Boeing 787
Security Boulevard – At the Black Hat security conference today in Las Vegas, Santamarta, a researcher for security firm IOActive, plans to present his findings, including the details of multiple serious security flaws in the code for a component of the 787 known as a Crew Information Service/Maintenance System.
New approach to risk management needed, says Gartner
ComputerWeekly – Most third-party risks are discovered after the initial due diligence period, Gartner study shows, highlighting the need for a new approach to risk management and the importance of effective access controls.
Having ‘Null’ as a license plate is about as much of a nightmare as you’d expect
The Verge – I’m not a massive fan of personalized license plates, but even I feel a little bad for Joseph Tartaro, a security researcher who, at one point, had as much as $12,049 in traffic fines because of an ill-advised license plate choice.
Hacker Gets $12,000 In Parking Tickets After ‘NULL’ License Plate Trick Backfires
Forbes – A security researcher by the name of Droogie decided to mess with the Automatic License Plate Reader systems that issue traffic fines, securing the vanity plate “NULL,” part for fun and part in the hope that this spoofed the system into returning errors whenever his plate was seen. Instead he received more than $12,000 in fines—clearly his plate became a dumping ground for erroneous data records.
Fingerprints and facial recognition data exposed in major breach
Sky News – More than one million fingerprints and a host of usernames and passwords have been exposed on an unsecured database hosted by a security platform that lists the Metropolitan Police among its clients. Researchers claim to have discovered the publicly accessible information on the web-based BioStar 2, which is owned and operated by South Korean company Suprema.