The impact of AI is already being felt in the enterprise organization. And no surprise, cyber-attackers are leveraging machine learning to carry out more sophisticated attacks. Is the tech mature enou…
Posts tagged "Security"
Critical Communications For Enterprise Cyber Security Incident Response
With communication systems down from a cyber-attack, employees want to know how to conduct business. Organizations have disaster recovery plans for electrical outages. What can cyber security leaders…
UK announces new security rules for IoT devices
Under new laws proposed by the UK government, all internet-connected devices will be required to abide by a strict set of security standards.
The new measures are designed to protect consumers and businesses against an increasing volume of cyberattacks. IoT devices – ranging from phones and tablets to smart speakers and cameras – have become a popular target due to poor security standards and, in some cases, discontinued security support.
Beyond scraping information from devices and using them as a route into private networks, criminals can harness hacked IoT devices to perpetrate DDoS attacks and take down online services.
- What is the IoT? Everything you need to know
- IoT giant exposes millions of customer details online
- The dangers of IoT and AI
The proposed legislation would require those involved in the manufacture and sale of connected devices in the UK to follow three rules:
– All consumer internet-connected device passwords must be unique and not resettable to any universal factory setting
– Manufacturers of consumer IoT devices must provide a public point of contact so anyone can report a vulnerability and it will be acted on in a timely manner
– Manufacturers of consumer IoT devices must explicitly state the minimum length of time that the device will receive security updates at the point of sale, either in store on online
Compulsory standards
The new security standards were developed by the Department for Culture, Media and Sport (DCMS), in collaboration with the National Cyber Security Centre (NCSC).
“Our new law will hold firms manufacturing and selling internet-connected devices to account and stop hackers threatening people’s privacy and safety,” said Matt Warman, minister for digital and broadband at DCMS.
“It will mean robust security standards are built in from the design stage and not bolter on as an afterthought,” he continued.
Until now, the UK has encouraged companies operating in the IoT space to adhere to a set of voluntary security practices. It has reached the conclusion that compulsory measures are necessary to ensure users are protected.
- Protect your connected devices with the best antivirus software for 2020
Via ZDNet
5 Undeniable Reasons To Prioritize Enterprise IoT Security
The “Internet of Things” (IoT) is already a part of the enterprise, whether cyber security administrators are ready or not. Cyber Security Hub developed a market report that uncovers five reasons why…
Cyber Security Incident Response Planning (CSIRP): Minimizing Business Impact An…
Responding to an enterprise cyber security incident has become commonplace. IT and security teams used to have to exercise their response plans, but today, they exercise them for real. Cyber Security…
Enterprise Security Leaders Prepare For Nation State Cyber Attacks
A lot of concern has been expressed by security leaders as a result of recent government and military conflict. While a military response has been downplayed, nation-states have demonstrated cyber-att…
Security Leaders Express Positive Market Sentiment for Enterprise Cyber Security
This Cyber Security Hub article summarizes the enterprise market sentiment about cyber security, looks into cyber dollar allocations for the New Year and tests a few ways that organizations are winnin…
Incident Of The Week: Zynga Security Breach Affects 170 Million User Accounts
Mobile game developer Zynga disclosed unauthorized access to 170 million user records. With personal data at stake, an openness and level of transparency is needed by businesses when communicating wit…
The Value Of Separating Compliance And Enterprise Cyber Security Goals
Cyber Security Hub created a market report offering end-user “best practices” for data privacy legislation and stack GDPR up against other international measures on compliance. Further, it provides in…

