SQLi, XSS zero-days expose Belkin IoT devices, Android smartphones

Email not displaying correctly? View it in your browser.

CSO

CSO Security Awareness Weekly

Nov 07, 2016
Featured Image

What awareness is supposed to be

Recent W-2 and accounts payable thefts show governance should be the cornerstone of awareness. Read More ▶

Twitter Facebook LinkedIn

Your Must-Read Stories

• SQLi, XSS zero-days expose Belkin IoT devices, Android smartphones
• Cyber self-defense for kids (and parents too)
• The worst people you meet doing IT security
• EMV, fraud mitigation or migration?
• What about the personal data on those millions of recalled Note7s?

eBook: DiscoverOrg

Cold Calls, Warm Leads

In recent years, Inbound Marketing has made a name for itself by providing a valuable way to attract and convert customers. However, relying solely on Inbound leaves room for a lot of missed opportunities. Find out why 39% of marketers think Outbound Marketing is more effective than Inbound methods by reading this eGuide. Read More ▶

Thumbnail Image

SQLi, XSS zero-days expose Belkin IoT devices, Android smartphones

Research director Scott Tenaglia and lead research engineer Joe Tanen detailed the vulnerabilities during their talk at the Black Hat Europe conference in London last Friday. The zero-day flaws specifically relate to Belkin’s smart home products and accompanying Android mobile application, which is used to wirelessly control the home automation devices. Read More ▶

Thumbnail Image

Cyber self-defense for kids (and parents too)

Today is the last day of national cyber security awareness month, but not too late for Ben Rothke, CISSP, QSA, Senior Security Consultant, Herjavec Group to provide some tips for parents and children. Read More ▶

Thumbnail Image

The worst people you meet doing IT security

Now I've collected specific kinds of insecure employees that infosec workers have had to deal with and protect—or protect their servers from. You'll definitely recognize people you work with on this list. Hopefully you won't recognize yourself. Read More ▶

Thumbnail Image

EMV, fraud mitigation or migration?

It's been just over a year since the roll out, but how much fraud has EMV really prevented? Read More ▶

Thumbnail Image

What about the personal data on those millions of recalled Note7s?

The users of millions of faulty Samsung Galaxy Note7s face a another potential dilemma: The fate of their personal data on the devices. Read More ▶

White Paper: Pure Storage

Evergreen Storage Is Changing Customer Experience Expectations in Enterprise Storage

Purchasers of enterprise storage have historically dealt with an upgrade cycle that was expensive, disruptive, inherently risky, and time consuming and occurred roughly every three to five years. In 2015, Pure Storage challenged customer preconceptions about the enterprise storage upgrade cycle with the announcement of its Evergreen Storage. Read More ▶

Top 5 Stories

1. Top 5 reasons to quit your cybersecurity job
2. Google to untrust WoSign and StartCom certificates
3. Researchers build undetectable rootkit for programmable logic controllers
4. DDoS attack on Dyn could have been prevented
5. Black Hat Europe: IoT devices can hack

Editor's Picks

1. 15 hot, new security and privacy apps for Android and iOS
2. How to get creative with your penetration testing
3. 5 security bolstering strategies that won't break the bank
4. What's wrong with this picture? The NEW clean desk test
5. Inside an attack by the Syrian Electronic Army
Twitter Facebook LinkedIn Google+

You are currently subscribed to CSO Security Awareness Weekly as newsletter@newslettercollector.com.

Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy

Learn more about INSIDER

Copyright (C) 2016 CSO Online Media Group, 492 Old Connecticut Path, Framingham, MA 01701

Please do not reply to this message.
To contact someone directly, send an e-mail to online@csoonline.com.