IoT

Mikko Hypponen's Vision of the Cybersecurity Future

0%
100%

BLACK HAT USA 2017 -- Twenty years from now, will everything be a thing in the Internet of Things? If so, how does the security industry need to prepare? F-Secure's chief research officer Mikko Hypponen visits the Dark Reading News Desk to weigh in on this, and what else the future promises (and threatens).

Watch all 45 News Desk interviews at DarkReading.com/DRNewsDesk.

Learn from the industry’s most knowledgeable CISOs and IT security experts in a setting that is conducive to interaction and conversation. Click for more info and to register.

Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
menuisier69
50%
50%
menuisier69,
User Rank: Apprentice
9/6/2017 | 5:15:43 AM
Re: Mikko Hypponen;s Security Talk
"Much as I respect his position, I think he is talking linearly and not laterally"

 

100% agree but Mikko Hypponen is still a genius :P
tcritchley07
50%
50%
tcritchley07,
User Rank: Moderator
9/5/2017 | 9:19:29 AM
Mikko Hypponen;s Security Talk
Much as I respect his position, I think he is talking linearly and not laterally. E,g. "I cant see SW in IOT devices". Nobody could see men landing on the moon 100 years ago be we did. IOT devices in a year or so can easily hold a 128 MB /(or GB) memory/storage and enough briains to  encrypt data and commands and to take part in a later cyber security architecture, However, the IoT manufacturers will have to toe the IoT function implementation line drawn by Goverments and businesses who carry very large sticks in the pursuit of security.

Even today, the bad guys are practising their IoT breach skills, e.g. Iranian nucclear plant, Ukraine power station, cars stopped in 'flight'  (by friendly hackers as a trial). They are an order of magnitude greater hazard than current exposures and 2 orders of magniude in number.
Veterans Find New Roles in Enterprise Cybersecurity
Kelly Sheridan, Staff Editor, Dark Reading,  11/12/2018
Empathy: The Next Killer App for Cybersecurity?
Shay Colson, CISSP, Senior Manager, CyberClarity360,  11/13/2018
Understanding Evil Twin AP Attacks and How to Prevent Them
Ryan Orsi, Director of Product Management for Wi-Fi at WatchGuard Technologies,  11/14/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Online Malware and Threats: A Profile of Today's Security Posture
Online Malware and Threats: A Profile of Today's Security Posture
This report offers insight on how security professionals plan to invest in cybersecurity, and how they are prioritizing their resources. Find out what your peers have planned today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-15769
PUBLISHED: 2018-11-16
RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is...
CVE-2018-18955
PUBLISHED: 2018-11-16
In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resour...
CVE-2018-19311
PUBLISHED: 2018-11-16
Centreon 3.4.x allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring > Status Details > Services" screen.
CVE-2018-19312
PUBLISHED: 2018-11-16
Centreon 3.4.x allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI.
CVE-2018-19318
PUBLISHED: 2018-11-16
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account.