A new Bluetooth vulnerability called Bleedingbit came out yesterday, affecting Bluetooth APs if they use a Texas Instruments chip. With many IoT devices using Bluetooth including TVs, cellphones, locks, and modern cars there are a lot of potential devices that could be exploited. Before we dive in, if you are a WatchGuard customer, you're probably wondering if you are … [Read more...]
High-Tech Lock, Low-Tech Security
Last week, BoxLock showed off their high-tech security lock that includes a bar code scanner on the ABC show Shark Tank. The lock was designed for applications where you would want to allow third party access to the protected area. For example, a delivery driver can open the lock by scanning a package bar code, and the lock would take care of marking the package as delivered. A … [Read more...]
California Bill Increases Default Password Security
California has taken steps to increase the password security on new devices made after January 1 2020. Senate Bill No. 327 forces manufactures to create unique passwords for each device or force the user to create a new password on their first login. This only applies to devices that are accessible outside the local network. (1) The preprogrammed password is unique to … [Read more...]
Facebook is Sharing “Shadow Contact Information” with Advertisers
Facebook did not have a good week last week and details are still coming. At the start of the week, Facebook users found that Facebook uses "shadow contact information" from 2-factor authentication and friends phonebooks to target advertisements to users. Later in the week, Facebook announced that at least 50 million users accounts were compromised through a series of … [Read more...]
T-Mobile Notifies Its Customers of A Security Breach
T-Mobile is having a rough year. Back in May, security researchers discovered an open API that could allow attackers to siphon off sensitive customer information. Now, just a few weeks ago, T-Mobile disclosed that that on August 20th their security team found unauthorized users retrieving data from T-Mobile servers. At this time, they believe over 2 million accounts were … [Read more...]
