IoT Device Attacks, FCC Fines Mobile Carriers, Let’s Encrypt Certificate Bug

In episode 111 for March 9th 2020: A new report shows that attacks on Internet of Things devices are on the rise, the FCC fines major mobile carriers for selling users’ location data, and details on what happens when 3 million HTTPS certificates need to be revoked because of coding error.
** Show notes and links mentioned on the show **
Take our podcast listener survey and be entered to win a $25 Amazon gift card!
https://sharedsecurity.net/survey
Attacks are targeting default passwords on IoT devices
https://www.zdnet.com/article/these-are-the-top-passwords-hackers-will-try-when-attacking-your-device/
https://blog.f-secure.com/attack-landscape-h2-2019-an-unprecedented-year-cyber-attacks/
Basic rules for securing IoT devices at home
https://krebsonsecurity.com/2018/01/some-basic-rules-for-securing-your-iot-stuff/
The FCC fines wireless companies for selling users’ location data
https://www.wired.com/story/fcc-fines-wireless-companies-selling-users-location-data/
T-Mobile data breach notification
https://www.t-mobile.com/responsibility/consumer-info/cpni-notice
Let’s Encrypt discovers CAA bug, must revoke customer certificates
https://www.theregister.co.uk/2020/03/03/lets_encrypt_cert_revocation/
https://community.letsencrypt.org/t/revoking-certain-certificates-on-march-4/114864
https://arstechnica.com/information-technology/2020/03/lets-encrypt-holds-off-on-revocation-of-certificates/
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post IoT Device Attacks, FCC Fines Mobile Carriers, Let’s Encrypt Certificate Bug appeared first on Shared Security Podcast.