👋#call4reading

✍️Modeling #IoT based Forest #FireDetection System with #IoTsec #by Meziane Hind, Ouerdi Noura and Ajith Abraham

🔗https://cspub-ijcisim.org/index.php/ijcisim/article/view/535

Hypponen's Law ( @mikko ) confirmed (again):

"At the Usenix Workshop on Offensive Technologies earlier this week, researchers from UC San Diego and Northeastern University revealed a technique that would allow anyone with a few hundred dollars of hardware to hack Shimano wireless gear-shifting systems of the kind used by many of the top cycling teams in the world, including in recent events like the Olympics and the Tour de France. Their relatively simple radio attack would allow cheaters or vandals to spoof signals from as far as 30 feet away that trigger a target bike to unexpectedly shift gears or to jam its shifters and lock the bike into the wrong gear."

Citation:
https://www.wired.com/story/shimano-wireless-bicycle-shifter-jamming-replay-attacks/z

#iot #infosec #cybersecurity #IoTSec

Dutch ethical hacker Wietse Boonstra discovered a critical vulnerability in solar panel systems that could have allowed disruption of 4 million systems across 150 countries. The vulnerability affected systems made by Enphase, an American company. Boonstra found a flaw that allowed him to become an administrator of multiple accounts without permission.

Sources:

1. Dutch Institute for Vulnerability Disclosure (DIVD) report: https://www.divd.nl/newsroom/articles/divd-responsibly-discloses-six-new-zero-day-vulnerabilities-to-vendor/

2. Original reporting from Follow the Money (FTM), a Dutch investigative outlet: https://archive.is/BVR80

3. Euractiv summary article (English): https://www.euractiv.com/section/energy-environment/news/hacker-shines-spotlight-on-vulnerability-of-solar-panels-installed-in-europe/

#infosec #cybersecurity #renewableenergy #ethicalhacking #iotsec

Cybersecurity and Infrastructure Security Agency (CISA) this week released an Industrial Control Systems (ICS) advisory warning of multiple vulnerabilities in Mitsubishi Electric GX Works3 engineering software.

#infosec #IoTSec #vulnerability #hacking

https://thehackernews.com/2022/12/cisa-warns-of-multiple-critical.html

@ted also, here's some people silently triggering voice commands with lasers

"Breaking Into a Smart Home With A Laser - Smarter Every Day 229"

https://www.youtube.com/watch?v=ozIKwGt38LQ

#SmarterEveryDay #IoT #IoTSec