Tag: iot
-
ClingSTUN Malware Turns Vulnerable IoT Devices Into Persistent Remote Proxy Nodes
ClingSTUN, a Linux backdoor that exploits unpatched internet-facing devices and converts them into persistent, remotely controlled proxy nodes. The malware combines startup persistence, process concealment, competitor termination, and remote command execution with legitimate STUN infrastructure to support connectivity through network address translation. The research published October 5 documents three campaign periods with changing payload servers…
-
ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications. First seen on darkreading.com Jump to article: www.darkreading.com/iot/clingstun-vulnerable-iot-devices-proxy-nodes
-
Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor
Meet ClingSTUN, a new Linux backdoor that exploits IoT vulnerabilities, gives attackers remote command access and turns infected devices into proxy nodes. First seen on hackread.com Jump to article: hackread.com/hackers-exploit-iot-vulnerabilities-clingstun-linux-backdoor/
-
ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes
ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/clingstun-backdoor-unpatched-iot/
-
Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices
A newly identified IoT botnet, Cling, disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to originate from Google’s public STUN infrastructure. The technique enables attackers to manage compromised internet-facing devices while blending activity into routine NAT-traversal traffic used by real-time communications platforms. Nozomi Networks Labs discovered the campaign while investigating a…
-
One Packet Can Crash OT Servers in Industrial Sectors
A high-severity zero-day vulnerability affects the TDengine time-series database used across industrial, IoT, energy, and automotive environments. First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/one-packet-crash-servers-tdengine
-
The Hidden Security Risks of Devices You Forgot Were Connected
IoT and OT devices can create hidden security gaps. Learn how asset visibility helps organizations find forgotten devices and reduce network security risks now. First seen on hackread.com Jump to article: hackread.com/hidden-security-risks-connected-devices/
-
Only 13% of OT Network Segments Keep Operational Technology Isolated
New research from Forescout Vedere Labs has found that critical operational and medical devices are frequently sharing network segments with IT and IoT assets, potentially giving attackers more opportunities to move laterally following an initial compromise. The cybersecurity research team analysed 47,700 real-world network segments containing more than 2.5 million devices across 209 organisations. Devices…
-
Compliance, KI und hybride IT prägen die Anforderungen an modernes Monitoring
Was sind wichtige Themen, die IT-Verantwortliche in Deutschland, Österreich und der Schweiz aktuell beschäftigen? Das zeigt die neue Kundenumfrage von Paessler, eines führenden Anbieters von IT- und IoT-Monitoring-Lösungen. Dafür wurden 262 PRTG-Nutzer und IT-Administratoren im DACH-Raum aus den Bereichen Produktion, IT, Healthcare, Behörden und weiteren Sektoren befragt. Weltweit nahmen insgesamt 1.088 Personen teil. Im internationalen…
-
Researchers Find Security Risks in 73.6% of 61,500 Abandoned IoT Apps
Researchers have identified significant security and privacy risks across 61,500 abandoned Android Internet-of-Things (IoT) companion applications. Their study found that 73.6% of these apps contained at least one potential vulnerability, risky embedded resource, or insecure communication path. Risks in Abandoned IoT Apps Titled >>When Apps Outlive Vendors: Security Implications of IoT Abandonware,<< the study examines…
-
Abandoned IoT apps keep sending sensitive data to broken servers
Millions of people still run smart home and IoT companion apps, the apps used to control devices like smart plugs, cameras, and thermostats, that stopped receiving updates … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/18/abandoned-iot-apps-data-security-risks/
-
Physische KI bis 2030: Wie Roboter, autonome Systeme und resiliente IoT-Infrastrukturen die operative Arbeit verändern
Physische KI wird bis 2030 zu einem strategischen Hebel für Produktivität, Resilienz und Arbeitssicherheit. Unternehmen müssen jetzt klären, welche operativen Prozesse sich durch intelligente Maschinen, autonome Systeme und vernetzte Sensorik neu gestalten lassen und welche Governance dafür nötig ist. Physische KI wird operativ: KI-Systeme verlassen die reine Daten- und Textverarbeitung und greifen über Roboter,… First…
-
Ebm-Papst Neo macht Ventilatorsysteme intelligent
Concept Reply, Experte für KI- und IoT-Technologien, und Storm Reply, spezialisiert auf Cloud- und KI-Lösungen, haben Ebm-Papst Neo, die Digital-Einheit des Ventilatorenherstellers Ebm-Papst, bei der Entwicklung der Plattform <> maßgeblich unterstützt. Gemeinsam haben die Experten die IT-Infrastruktur und das Backend realisiert sowie die von Ebm-Papst Neo entwickelten Digital-Service-Algorithmen in die Cloud integriert. <> bildet das…
-
KI als Taktgeber und Schutzschild: Wie Unternehmen ihre IoT-Flotten zukunftssicher schützen
KI verschärft die Cyberbedrohung für vernetzte Geräte und wird zugleich zum zentralen Instrument ihrer Abwehr. Entscheidend sind dabei nicht nur intelligente Analysen, sondern eine durchgängige Sicherheitsarchitektur aus Geräteidentität, geschützter Konnektivität, Netzwerksegmentierung und menschlicher Kontrolle. Das Interview mit Timo Ross zeigt, welche Maßnahmen Unternehmen jetzt priorisieren sollten. Management Summary KI erhöht Tempo und Skalierung… First seen…
-
New IoT Malware Uses Public Linux Exploits to Gain Root and Launch DDoS Attacks
A newly observed IoT malware family dubbed KATARU targets internet-exposed devices through Telnet credential brute-forcing, then attempts to gain root privileges with publicly available Linux kernel exploits before enrolling compromised systems in a DDoS botnet. The sample combines familiar Mirai-style flooding functions with encrypted command-and-control, broad persistence logic, anti-analysis checks and decoy network activity designed…
-
LEADING TO A SOVEREIGN DIGITAL FUTURE TOGETHER
A1 Digital ist ein europäischer Partner für digitale Infrastruktur und Lösungen mit dem Ziel, Unternehmen gemeinsam in eine souveräne digitale Zukunft zu führen. Zu den Angeboten gehören Exoscale eine europäische Cloud-Plattform, Managed Connectivity in über 180 Ländern, vertikale IoT Branchenlösungen mit Erfahrung von über 1 Million ausgelieferten Geräten und skalierbare Netzwerklösungen, ergänzt durch 24/7… First…
-
Daily OT Security News: September 08, 2026
Today’s verified developments cover critical vulnerabilities, exploit chains, AI-assisted PLC research, federal incident-reporting fragmentation, and a major mobile security release, items that affect IoT, OT, ICS, CPS, industrial and critical”‘infrastructure operations, and connected devices. N-able Patches Critical Zero-Day in… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-08-2026/
-
Daily OT Security News: September 07, 2026
Today’s selection covers IoT, OT, ICS and cyber-physical-system security developments that may affect edge networking, management platforms, industrial assets and healthcare devices. Hackers exploit new MikroTik RouterOS flaws to hijack routers Attackers are actively exploiting a chain of two MikroTik… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-07-2026/
-
Tengu Mirai-Style Linux Bot Hides as Kernel Worker to Launch DDoS and Proxy Attacks
A newly analyzed Linux malware sample, dubbed Tengu, combines Mirai-style botnet tradecraft with broad persistence, DDoS, SSH probing, and proxy capabilities. The stripped 32-bit ELF masquerades as a Linux kernel worker process while targeting servers, embedded devices, and IoT-adjacent systems. It has no symbols, uses NX protection and partial RELRO, and carries a SHA-256 hash…
-
Daily OT Security News: September 06, 2026
Briefing for OT, ICS, IoT, and cyber-physical-security leaders: concise summaries of verified developments and recommended follow-up actions from the named sources below. CISA Scraps Six Free Cybersecurity Assessments for Critical Infrastructure Operators Cybersecurity Dive reports that CISA is ending six… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-06-2026/
-
Daily OT Security News: September 06, 2026
Daily OT Security News, September 06, 2026. This edition summarizes the time-window-qualified developments found in the latest review of IoT, OT, ICS, and cyber-physical security reporting. The review produced two source-supported items rather than padding the briefing with older… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-06-2026-2/
-
Daily OT Security News: September 05, 2026
Daily OT Security News: September 05, 2026 Briefing for OT, ICS, IoT, and CPS security leaders summarizing verified developments affecting water, manufacturing, and edge-device update practices. Each item highlights operational implications and authoritative sources for follow-up. Water-sector cyber risk remains… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-05-2026-2/
-
Daily OT Security News: September 05, 2026
Daily OT Security News: September 05, 2026 Brief, verified updates for OT, ICS, IoT, and CPS security leaders. Water-sector cyber risk remains a national challenge with local defenses A September 4 interview describes how recent cyberattacks on water utilities expose… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-05-2026-3/
-
Redundante Konnektivität auf SIM-Ebene – Telefónica Deutschland und Crout bringen IoT-SIM mit zwei Netzprofilen
First seen on security-insider.de Jump to article: www.security-insider.de/2coresim-ausfallsichere-iot-sim-dual-netzprofil-a-c9bf0c95e7d147677807c29c13182b39/
-
Security-by-Design: Was der Cyber Resilience Act für IoT-Hersteller bedeutet
Der Cyber Resilience Act verschiebt Cybersicherheit im IoT von der technischen Kür zur unternehmerischen Pflicht. Für Hersteller vernetzter Produkte bedeutet das: Security-by-Design, belastbare Meldeprozesse und kontinuierliche Transparenz werden zu zentralen Voraussetzungen für Marktzugang, Compliance und operative Resilienz. Management Summary Der CRA macht Cybersicherheit zur Marktzugangsvoraussetzung: Hersteller digitaler Produkte müssen Sicherheit künftig über den gesamten Lebenszyklus……
-
Cybersecurity for Manufacturing
Manufacturing is undergoing a major digital transformation. Modern factories increasingly connect operational technology (OT), industrial control systems (ICS), robotics, sensors, industrial IoT devices, enterprise applications, cloud platforms, supply-chain systems, and remote-access technologies. These technologies help manufacturers improve productivity, automate production,… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/cybersecurity-for-manufacturing/
-
Cybersecurity for Manufacturing
Manufacturing is undergoing a major digital transformation. Modern factories increasingly connect operational technology (OT), industrial control systems (ICS), robotics, sensors, industrial IoT devices, enterprise applications, cloud platforms, supply-chain systems, and remote-access technologies. These technologies help manufacturers improve productivity, automate production,… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/cybersecurity-for-manufacturing/
-
Industrial Cybersecurity
Industrial organizations are increasingly connecting operational technology (OT) environments to enterprise IT networks, cloud platforms, remote monitoring systems, industrial IoT devices, and third-party services. This connectivity creates operational advantages, but it also expands the cyberattack surface. Industrial cybersecurity is the… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/industrial-cybersecurity/
-
Daily OT Security News: September 1, 2026
This briefing summarizes verified advisories, reporting, legal analysis, and vendor commentary on operational-technology security issues relevant to OT, ICS, IoT, CPS, and critical”‘infrastructure professionals. UK NCSC warns of increased targeting of operational technology Government advisory (NCSC, 27 August 2026): the… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-1-2026/
-
Claroty auf der it-sa 2026 OT-Sicherheit reicht nicht aus
Auch in diesem Jahr präsentiert Claroty auf der it-sa seine Lösungen für die Sicherheit cyberphysischer Systeme (CPS). Ob intelligente Gebäudetechnik, industrielle Fertigungsanlagen, medizinische Geräte oder unternehmensweite IoT-Systeme: cyberphysische Systeme bilden heute die Grundlage des täglichen Lebens und unserer Wirtschaft. Angesichts einer stetig wachsenden Bedrohungslage, von finanziell motivierten Cyberkriminellen bis hin zu staatlich unterstützten Angreifern, reicht…