Computer Weekly – Less than half of firms able to detect IoT breaches, study shows

cw_logoUK firms have one of the lowest internet-of-things device breach detection capabilities in Europe, a study reveals

Only 48% of European firms can detect when any of their internet-connected devices have been breached, a survey shows.

In the UK, this figure drops to 42%, the second lowest in Europe after France, where only 36% of companies polled said they can detect if any of their devices making up the internet of things (IoT) suffers a breach, according to the study by digital security firm Gemalto.

“Given the increase in the number of IoT-enabled devices, it’s extremely worrying to see that businesses still can’t detect if they have been breached,” said Jason Hart, CTO of data protection at Gemalto.

“With no consistent regulation guiding the industry, it’s no surprise the threats – and, in turn, vulnerability of businesses – are increasing. This will only continue unless governments step in now to help industry avoid losing control.”

To read the full article click here.

Reader’s Digest – 17 Everyday Things You Didn’t Know Could Be Hacked

readersdigestMore and more, common items we regularly use are becoming connected, making things more convenient not only for us, but for hackers, too. Here’s how to protect your home—and your family.

While it’s cost-effective and handy to be able to control the temperature of your home while you’re out—say cranking up the AC when you’re headed home from the office—smarthome systems are vulnerable, says Jason Hart, VP and CTO for Data Protection at Gemalto. “Hackers can control a thermostat and crank up the heat until the owner pays a ransom.”

 

To read the full article click here.

The Merkle –  The Internet of (Insecure) Things: Could Blockchain Be the Solution?

themerkle-logoThe Internet of Things is taking a while to get off the ground. And with so many high-profile hacking attacks and PR disasters affecting big players like Yahoo and Jeep, it’s hardly surprising. The Internet of Things is looking a lot more like the Internet of Insecure Things, as parents watch their children’s smart dolls being hacked and patients worry about who’s controlling their cardiac devices.
“It’s clear that both consumers and businesses have serious concerns around IoT security, and little confidence that IoT service providers and device manufacturers will be able to protect IoT devices,” says Jason Hart, Chief Technology Officer at Gemalto.

To read the full article click here.

AV Technology Europe – Is your AV equipment putting your company’s cyber security at risk?

avte-logo“The change and transformation that AV brings is fantastic, but it’s all a potential proxy for the bad guys to get into an organisation”

Jason Hart, CTO, data protection at Gemalto – a world leader in digital security – agreed, stating that any piece of connected AV equipment creates added opportunities for cyber criminals to gain access to your precious data.

“Anyone with digital signage, uses digital displays, does video conferencing, uses a microphone and has speakers are all potentially at risk,” he explained.“Every piece of equipment that’s connected to a network is a potential doorway for a hacker. Anyone with a digital display, or does video conferencing, uses microphones and has speakers are potentially at risk. Think about all the information displayed on an interactive whiteboard? Your entire business strategy might have been outlined, containing highly confidential information. That whiteboard is recording everything electronically and storing it on a computer and that computer is backing it up to the cloud. If I was a bad guy and could access that information, the ramifications could be enormous.

He continued: “What about a lawyer or a legal council using forms of AV technology, such as conference calling? What if I could find that conference calling system online and listen in to the calls without them even knowing?

“The change and transformation that AV brings is fantastic, but it’s all a potential proxy for the bad guys to get into an organisation.”

To read the full article click here.

Raconteur – Industry 4.0: Five worrying cyberthreats to connected tech

raconteurAs connected technology develops, potential threats to cybersecurity multiply. Here are five major areas of concern.

Manufacturers must understand they are no longer just at risk from data theft, but also data manipulation. “This is where hackers can get into a system and alter the data to showcase false information, which could be in the form of anything from sales figures to temperature gauges,” explains Jason Hart, chief technology officer for data protection at Gemalto.

To read the full report, included with the print edition of The Times (UK) Newspaper, click here.

BBC News – Lock out: The Austrian hotel that was hacked four times

bbcnewsThe internet of things (IoT) promises many advantages – smart cities with integrated transport systems, for instance – but it comes with a significantly increased cybersecurity risk. So how should we be tackling this new threat?

Meanwhile, “we’re starting to see attacks focusing on compromising the integrity of data”, says Jason Hart, chief technology officer for Dutch digital security firm Gemalto.

To read the full article click here.

Computer Business Review – Businesses believe data is as valuable as currency, but are struggling to secure it

cbr-logoAs data grows in value to businesses, cybercriminals actively monitor businesses to understand exactly what data they collect and store.

How much data do businesses now store? With more being created in the last two years than every previous year combined, it shouldn’t be surprising that it’s a lot.

Add on top of this the massive impact the adoption of IoT devices will have on the amount of data being produced, and this growth shows no signs of slowing down. Data is now intrinsic to understanding market trends and customer demand, and its value to a business and impact on bottom lines has grown.

To read the full article click here.

HelpNet Security – Infosec expert viewpoint: IoT security initiatives

helpnetIoT went quickly from buzzword to mainstream, and connected devices have become common in households and enterprises around the globe. A worrying lack of regulation has fueled a plethora of security problems causing headaches to security teams and endangering end users.

“A new IoT botnet, called Reaper, surfaced recently, infecting thousands of webcams, security cameras and DVRs, and providing a fresh reminder of the persisting security issues with the IoT. In response, we need to implement the lessons learned a year ago from the Mirai attack. One of the shocking revelations at that time was that so many devices had hardcoded, unchangeable passwords. Many others were protected only by unchanged default passwords.

IoT manufacturers, cloud providers and third-party vendors need not only to better protect these devices with dynamic passwords and to patch known vulnerabilities, but also to encrypt communication between the devices and to create an infrastructure of trusted identities that can be authenticated virtually. A recent Gemalto survey found that just 62 percent of organizations currently encrypt data as soon as it reaches their IoT devices. Two thirds of organizations admitted they don’t have complete control over the data that IoT products or services collect as it moves from partner to partner.

The same survey found that 96 percent of business organizations and 90 percent of consumers are looking for government-enforced IoT security regulation. Currently, without any such law, companies are managing it on their own and falling short. Security in IoT is not a patch or quick fix. There are too many devices and users, and the cost associated with a traditional security patching approach would be too great.

Hopefully the “distributed consensus” capabilities of blockchain will soon come into play and give us an even better way to secure IoT communications. Multiple organizations are working on ways to use blockchain to improve how we do authentication and non-repudiation for the IoT.”

To read the full article click here.

IoT Now – Gemalto survey confirms that consumers lack confidence in IoT device security

Internet of ThingsGemalto, a provider of digital security, has revealed that 90% of consumers lack confidence in the security of Internet of Things (IoT) devices. This comes as more than two-thirds of consumers and almost 80% of organisations support governments getting involved in setting IoT security.

“It’s clear that both consumers and businesses have serious concerns around IoT security and little confidence that IoT service providers and device manufacturers will be able to protect IoT devices and more importantly the integrity of the data created, stored and transmitted by these devices,” said Jason Hart, CTO, Data Protection at Gemalto.

“With legislation like GDPR showing that governments are beginning to recognise the threats and long-lasting damage cyber-attacks can have on everyday lives, they now need to step up when it comes to IoT security. Until there is confidence in IoT amongst businesses and consumers, it won’t see mainstream adoption.”

To read the full article click here.

Vanillia Plus – Gemalto survey confirms that consumers lack confidence in IoT device security

vanillaplusGemalto, a provider of digital security, has revealed that 90% of consumers lack confidence in the security of Internet of Things (IoT) devices. This comes as more than two-thirds of consumers and almost 80% of organisations support governments getting involved in setting IoT security.

“It’s clear that both consumers and businesses have serious concerns around IoT security and little confidence that IoT service providers and device manufacturers will be able to protect IoT devices and more importantly the integrity of the data created, stored and transmitted by these devices,” said Jason Hart, CTO, Data Protection at Gemalto.

“With legislation like GDPR showing that governments are beginning to recognise the threats and long-lasting damage cyber-attacks can have on everyday lives, they now need to step up when it comes to IoT security. Until there is confidence in IoT amongst businesses and consumers, it won’t see mainstream adoption.”

To read the full article click here.