DBusiness Magazine | escar USA, a conference focused on embedded security in cars is taking place June 20-22 at St. John’s Resort in Plymouth Township. The conference brings together automotive cybersecurity professionals from industry, academia, and government organizations, including Josep Pi Rodriguez, principal security consultant at IOActive, who will be presenting his research on a sophisticated relay attack that would allow someone with physical access to a Tesla Model Y to unlock and steal it in a matter of seconds. The vulnerability involves what’s called an NFC relay attack and…
SECURITY MANAGEMENT MAGAZINE | What if you could physically manipulate a high-quality drone to corrupt its memory, gain control of it, and potentially leak its data? Security research firm IOActive put that theory to the test earlier this year when it conducted an experiment on DJI’s Mavic Pro that was detailed in a whitepaper published Monday.
Risky Biz News | Drone security research: New research from IOActive shows that unmanned aerial vehicles are vulnerable to electromagnetic fault injection (EMFI) attacks that can allow a threat actor to run malicious code even if the drone is running up-to-date firmware. The attack was successfully tested against a DJI Mavic Pro drone, but in theory, it should work on other vendors and models as well.
gbhackers.com | Based on the recent reports by IOActive, Drones, also called Unmanned Aerial Vehicles (UAVs), are vulnerable to code injection, which would result in gaining complete access to the firmware and core functionality of the drone. Drones have been used in many industries like aviation, agriculture, and law enforcement. They are often operated remotely, which offers an attack surface for threat actors to gain control over them.
weforum.org | This monthly round-up brings you key cybersecurity stories from the past month. Top cybersecurity news: US faces huge cyber-espionage campaign; Big British firms hit by cyberattacks on outsourcing suppliers; Highest AI cyberthreat will stem from deep fakes, says Microsoft’s Brad Smith.