Software Integrity Blog

Author Archive

Robert Vamosi

robertvamosi


Posts by Robert Vamosi:

 

Yes, Virginia, smart televisions can get ransomware

Over the holidays, a software engineer disclosed to Twitter that a family member had contracted ransomware on their smart TV.

Continue Reading...

Posted in Internet of Things | Comments Off on Yes, Virginia, smart televisions can get ransomware

 

Synopsys finds Bluetooth memory vulnerability in macOS/OS X

On Tuesday, researchers at Synopsys were credited in an Apple Update with finding a Bluetooth memory vulnerability in its operating system.

Continue Reading...

Posted in Fuzz Testing, Software Architecture and Design | Comments Off on Synopsys finds Bluetooth memory vulnerability in macOS/OS X

 

Software glitch causes FAA to order Boeing 787s powered down

Until Boeing provides a permanent software fix, airlines with 787 Dreamliners in their fleet will have to power down the planes once every 22 days.

Continue Reading...

Posted in Security Standards and Compliance | Comments Off on Software glitch causes FAA to order Boeing 787s powered down

 

Command injection vulnerability in Locus Energy solar panels patched

A command injection vulnerability (CWE-73) disclosed within the software used by Locus Energy solar panels has now been patched by the company.

Continue Reading...

Posted in General | Comments Off on Command injection vulnerability in Locus Energy solar panels patched

 

Nintendo launches bug bounty for DS3

Japanese gaming company Nintendo is offering researchers up to $20,000 for critical security vulnerabilities found in its 3DS family of consoles.

Continue Reading...

Posted in Software Architecture and Design | Comments Off on Nintendo launches bug bounty for DS3

 

Researchers hijack automotive mobile apps

Last month researchers demonstrated how a mobile app for Tesla–or any other connected car — can be hacked, enabling criminal hackers to locate, unlock, and potentially steal a Tesla vehicle.

Continue Reading...

Posted in Automotive Security, Mobile Application Security | Comments Off on Researchers hijack automotive mobile apps

 

Cyber attacks erase Saudi government data

The data on thousands of computers at the headquarters of the General Authority of Civil Aviation in Saudi Arabia was erased starting in mid-November by malware from “outside the country,” according to a state report.

Continue Reading...

Posted in Data Breach | Comments Off on Cyber attacks erase Saudi government data

 

Mirai botnet targets Deutsche Telekom routers, causing outages

Over the weekend, around 1 million Deutsche Telekom customers experienced interruptions in their Internet services, a denial of service that has now been traced to the Mirai botnet.

Continue Reading...

Posted in Data Breach, Internet of Things | Comments Off on Mirai botnet targets Deutsche Telekom routers, causing outages

 

‘PoisonTap’ steals network passwords

A new exploit tool requires only 30 seconds to install a privacy-invading backdoor on a previously locked computer.

Continue Reading...

Posted in Uncategorized | Comments Off on ‘PoisonTap’ steals network passwords

 

DDoS attack, BlackNurse, uses ICMP

Criminal hackers with limited resource can defeat firewalls with a new attack.

Continue Reading...

Posted in Data Breach | Comments Off on DDoS attack, BlackNurse, uses ICMP