A lightbulb worm could take over every smart light in a city in minutes

Researchers from Dalhousie University (Canada) and the Weizmann Institute of Science (Israel) have published a working paper detailing a proof-of-concept attack on smart lightbulbs that allows them to wirelessly take over the bulbs from up to 400m, write a new operating system to them, and then cause the infected bulbs to spread the attack to all the vulnerable bulbs in reach, until an entire city is infected. (more…)

View original post here:
A lightbulb worm could take over every smart light in a city in minutes

Return of Dieselgate: 3 more hidden programs found in VW Audi/Porsche firmware

The German newspaper Bild am Sonntag says that US investigators have discovered three more hidden cheat apps in a Volkswagen product line: these ones were discovered in 3-liter Audi diesels. (more…)

See the article here:
Return of Dieselgate: 3 more hidden programs found in VW Audi/Porsche firmware

Proof-of-concept ransomware for smart thermostats demoed at Defcon

Last week, Andrew Tierney and Ken Munro from Pen Test Partners demoed their proof-of-concept ransomware for smart thermostats, which relies on users being tricked into downloading malware that then roots the device and locks the user out while displaying a demand for one bitcoin. (more…)

Read the article:
Proof-of-concept ransomware for smart thermostats demoed at Defcon

1 billion computer monitors vulnerable to undetectable firmware attacks

A team led by Ang Cui ( previously ) — the guy who showed how he could take over your LAN by sending a print-job to your printer — have presented research at Defcon, showing that malware on your computer can poison your monitor’s firmware, creating nearly undetectable malware implants that can trick users by displaying fake information, and spy on the information being sent to the screen. (more…)

Originally posted here:
1 billion computer monitors vulnerable to undetectable firmware attacks

For 90 years, lightbulbs were designed to burn out. Now that’s coming to LED bulbs.

In 1924, representatives of the world’s leading lightbulb manufacturers formed Phoebus, a cartel that fixed the average life of an incandescent bulb at 1,000 hours, ensuring that people would have to regularly buy bulbs and keep the manufacturers in business. (more…)

Visit link:
For 90 years, lightbulbs were designed to burn out. Now that’s coming to LED bulbs.

Crapgadget apocalypse: the IoT devices that punch through your firewall and expose your network

Cheap Internet of Things devices like Foscam’s home CCTVs are designed to covertly tunnel out of your home network, bypassing your firewall, so they can join a huge P2P network of 7 million other devices that is maintained and surveilled by their Chinese manufacturer. (more…)

Read the original:
Crapgadget apocalypse: the IoT devices that punch through your firewall and expose your network

Your baby monitor is an Internet-connected spycam vulnerable to voyeurs and crooks

Researchers revealed ten major vulnerabilities in Internet-of-Things babycams from a variety of vendors ranging from spunky startups like Ibaby Labs to rock-ribbed (and deep-pocketed — attention, class actioneers!) giants like Philips. Read the rest

More here:
Your baby monitor is an Internet-connected spycam vulnerable to voyeurs and crooks

Navy openly solicits for 0-day bugs to weaponize

A solicitation on FedBizOpps from the Navy asks security researchers to sell them their “vulnerability intelligence, exploit reports and operational exploit binaries affecting widely used and relied upon commercial software.” Read the rest

Read More:
Navy openly solicits for 0-day bugs to weaponize