Belkin IoT Smart Plug Flaw Allows Remote Code Execution in Smart Homes
Threatpost – An unpatched buffer overflow flaw allows remote attackers to completely take over the device and enter the home network. A vulnerability in a popular Wi-Fi–connected electric outlet for smart homes would allow a remote attacker to take over smart TVs and other devices, as well as execute code – potentially exposing tens of thousands of consumers to cryptomining, ransomware, information disclosure, botnet enslavement and more.
Philips reveals code execution vulnerabilities in cardiovascular devices
ZDNet – Vulnerabilities have been discovered in multiple versions of Philips cardiovascular imaging devices. According to a security advisory from the US Department of Homeland Security’s ICS-CERT, the first vulnerability, CVE-2018-14787, is a high-severity flaw which affects the Philips IntelliSpace Cardiovascular and Xcelera IntelliSpace Cardiovascular (ISCV) products.
Could Satellite Communication Systems (SATCOMs) be too Easy to Hack?
Asgardia – Satellite communication systems (SATCOMs) allow us to send and receive information from around the world; they are the power behind our internet, TVs, phones, radios, military operations, and more. Currently, there are over 2,000 communications satellites orbiting our planet, and as per the cybersecurity company IOActive, they are scarily easy to hack.
In-flight satellite comms vulnerable to remote attack, researcher finds
Naked Security – IOActive’s researcher Ruben Santamarta is the sort of person anyone interested in computer security would probably enjoy sitting next to on a long flight. Take the journey he made last November between Madrid and Copenhagen on Norwegian during which (naturally) he decided to use Wireshark to study the aircraft’s in-flight Wi-Fi.
IoT security: New AI, ML, 5G, WingOS, satcom risks identified
Internet of Business – Last week was a bad one for the cybersecurity sector, according to security experts at the DEF CON and Black Hat conferences. Chris Middleton rounds up the latest batch of reports. Cybersecurity companies’ reliance on artificial intelligence (AI) and machine learning is introducing new types of automated security risk, an industry insider has warned.