News
  • "JekyllBot:5 Vulnerabilities Impact Mobile Robot Used in Healthcare"
    Researchers at Cynerio have discovered critical zero-day vulnerabilities in Aethon TUG smart autonomous mobile robots, which are used globally in hospitals. The Aethon TUG robot performs manual labor tasks and delivers hospital supplies and medications.…
  • "LockBit Ransomware Gang Lurked in a US Gov Network for Months"
    According to researchers at the cybersecurity company Sophos, LockBit ransomware actors hid in the network of a regional US government agency for at least five months before deploying the payload. The attackers attempted to remove their tracks by…
  • "SuperCare Data Breach Involves More Than 300,000 Individuals"
    SuperCare Health, a California-based respiratory care provider, has revealed it had been hit by a data breach that affected more than 300,000 individuals.  The company discovered the incident on July 27, 2021, when unauthorized activity was detected…
  • "Consumers Increasingly Numb to Data Breach Risks"
    Security researchers at Imperva have discovered that consumer trust in the organizations they do business with is at rock bottom, leading many to “give up” on security.  The researchers polled over 6700 consumers across the US, Singapore, UK, and…
  • "Cloud Server Leasing Can Leave Sensitive Data up for Grabs"
    A new study by researchers at Penn State University finds that the standard business practice of renting space and IP addresses on a public server can lead to cloud squatting, which creates a security risk, putting sensitive customer and organization…
  • "Your Digital Footprints Are More Than A Privacy Risk – They Could Help Hackers Infiltrate Computer Networks"
    Ravi Sen, a Texas A&M cybersecurity researcher, brings further attention to how information shared online can help hackers successfully execute phishing attacks. Using the Internet results in the creation of a trail of data or a set of digital…
  • "With AI RMF, NIST Addresses Artificial Intelligence Risks"
    Artificial intelligence (AI) applications within business and government organizations are being adopted rapidly.  Some of the AI applications being adopted rapidly include: automating activities to function more efficiently, reshaping shopping…
  • "Raspberry Pi Ditches Default Logins to Boost Security"
    The developers behind Raspberry Pi have enhanced security.  A senior principal software engineer explained that previously, users were able to keep the default username “pi.” They were also able to bypass a setup wizard which requested users to…
  • "SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts"
    A team of researchers at Salt Security's Salt Labs discovered a Server-Side Request Forgery (SSRF) flaw in the Application Programming Interface (API) of a large financial technology (fintech) platform. The flaw could have compromised millions of bank…
  • HoTSoS 2022 Best Undergraduate Poster Award
    HOTSOS 2022 BEST UNDERGRADUATE POSTER AWARD Congratulations to Sanjana Cheerla at NCSU for winning the HoTSoS Best Undergraduate Poster Award for their poster Identifying Online Misbehavior. Check out the Announcement & Closing Remarks…
  • HoTSoS 2022 Best Poster Award
    HOTSOS 2022 BEST POSTER AWARD Congratulations to Samin Yaseer Mahmud & William Enck at NCSU for winning the HoTSoS Best Poster Award for their poster A Study of Security Weakness in Android Payment Service Provider SDKs.  Check out…
  • "Employee Info Among 13 Million Records Leaked by Fox"
    A team at Website Planet has found that a configuration error exposed millions of internal records traced back to Fox News, including personally identifiable information on employees.  The researchers claimed that anyone with an internet connection…