Tag Archive for: prime

Luukas Ilves, Gulsanna Mamediieva, and David Eaves, with Vice Prime Minister of Ukraine Mykhailo Fedorov


David: Ukraine offers a window into a collective future about how we might face the coming crises. Ukraine happens to be facing an existential crisis created by an illegal war committed by its neighbor, but all countries are facing climate change crises, financial crises, and possible future pandemics. So, a country’s responsive capacity – Sana talked about her government’s resilience – to those things is going to be core to determining trust in government. If we want democracies to survive, they have to perform well. We need digital-era governments to respond to 21st-century problems. That means having the flexibility and the capacity to be able to do that. That’s what the Estonians have and it’s what the Ukrainians are showing us: how digital fits into that capacity building. For me, a big takeaway from the convening was how much climate change is going to drive this need. If there are going to be 10 million internationally displaced people in 50 countries around the world over the next 20 years, we’re going to need some capacity to serve those people when they lose their houses and are roaming around your country. The only way a country is going to be able to do that is if it has a digital solution.

Luukas: We hope these stories are inspiring for people interested in digital public infrastructures. Many countries in the world tend to be very pessimistic about the public sector’s capacity to do these things. That becomes a self-fulfilling prophecy. The most important thing is, whatever your position, be demanding of your government. Because there’s no inherent law that says the government has to be bad at technology. The more positive pressure there is from the people to do better, the greater the country’s chances of success.

Sana: I’d encourage people to find energy and inspiration in democracy. Citizens should have higher expectations from the government for the services that they receive. Especially in terms of convenience and user experience. But for those people who work specifically in this sphere, it requires a lot of energy, persistence, and flexibility to overcome obstacles. What I took from the convening was that everyone, on every level, has to…

Source…

Auto dealers are prime targets for hackers, warn researchers


Car dealerships are prime targets for hackers eager to exploit weak security and access a treasure trove of financial data and gain access to third-party vendor supply chains.

According to Tuesday report posted to AT&T Cybersecurity’s blog, cybercriminals are zeroing in on car dealerships considering them easy targets for a cyberattack. Attack vectors include, “outdated IT infrastructure and lacks sufficient processes in terms of protecting employee login details,” according the report.

Adding to the mix of security issues is the increasingly sophisticated number of computer-based diagnostic tools used in auto repair bays and computer systems in car dealer back offices. That has adversaries revving their hacker engines ready to attack, said Theresa Lanowitz, head of cybersecurity evangelism at AT&T Business.

“Employees in a car dealership may have lax security hygiene which means it’s even easier for adversaries to launch attacks. And car dealerships have repair bays with internet connected devices. These devices, if breached, also offer an adversary a way into the network to potentially execute nefarious activities,” Lanowitz said.

Those attack surface weak spots are low-hanging fruit for attackers to easily plant malware, eavesdrop on insecure Wi-Fi connections or exploit poor password hygiene.

No such thing as cybersecurity airbags

The danger is not theoretical for dealerships or vendors connected to dealerships who could also be put at greater risk. In a separate report out this week, researcher Eaton Zveare detailed a severe vulnerability he found in the web portal of Toyota’s global supplier management network.

“I hacked Toyota’s Global Supplier Preparation Information Management System,” Zveare wrote.” The system in question is “a web app used by Toyota employees and their suppliers to coordinate projects, parts, surveys, purchases, and other tasks related to the global Toyota supply chain.”

The research, conducted in 2022 and disclosed this week, allowed the researcher to access 14,000 corporate user accounts and confidential documents. The issue was responsibly disclosed to Toyota and the security hole was mitigated immediately.

FTC tackles dealership security and…

Source…

Phosphorus Unveils Interactive xIoT Security Lab and Experiences at S4x23 as a Prime Sponsor


Phosphorus Cybersecurity Inc.

Phosphorus Cybersecurity Inc.

xIoT security leader will showcase interactive hacking demonstrations, a hands-on lab, CTF and more at S4 to raise awareness about the security risks of critical OT, ICS, IoT, and Network devices.

NASHVILLE, Tenn., Jan. 31, 2023 (GLOBE NEWSWIRE) — Phosphorus, the leading provider of proactive and full-scope security for the extended Internet of Things (xIoT), is proud to be a Prime Sponsor at S4x23, a leading conference focused on the future of OT and ICS cybersecurity. As part of its S4 presence, Phosphorus will offer live demonstrations of high-risk OT/ICS and IoT devices through its Mobile xIoT Security Lab, speaking sessions on the state of xIoT security and how to thwart bad actors, as well as a “Mystery Device” security and hacking challenge which it is hosting as part of S4’s ICS CTF.

The company’s interactive, on-site space and experiences at S4 will provide attendees with hands-on opportunities to examine the security risks posed by widely used xIoT devices and to test their skills at discovering, analyzing, and exploiting these vulnerable devices. All of these events, from the mobile lab to the CTF and speaking sessions, will be located at Phosphorus’s S4 sponsor room at the Sundial Room, 3rd Floor of the Loews Hotel.

“The ability to move beyond just detecting threats, attacks, and vulnerabilities that target critical OT, IoT, IIoT, and Network devices is still poorly understood, which is why we’re making these hands-on, prevention-based activities a key part of our sponsorship and presence at this year’s S4,” said John Vecchi, Chief Marketing Officer of Phosphorus. “We want to move beyond the high-level discussions to physically show attendees just how vulnerable and easily exploitable these devices can be, while also demonstrating our ability to proactively find, fix, and manage them. And over the coming year, our new xIoT research division, Phosphorus Labs, will be releasing new research highlighting the persistent security issues, challenges, and vulnerabilities with xTended Internet of Things devices.”

One-of-a-Kind Security Lab at S4
Phosphorus’s Mobile xIoT Security Lab offers S4 participants a unique…

Source…

Get 6 Months of Amazon Prime When You Buy an O2 Phone Plan


Source…