Genetics of a Modern IoT Attack
When it comes to IoT attacks and malware, there is a perceptible pattern in which most intrusions manifest. It is good practice to study such patterns and draw conclusions so that we may extrapolate to future attacks.
Release 3.0 of the IoT Security Assurance Framework Announced
Business ready: extends use into supply chain and aligns with more security standards November 17th, 2021 The IoT Security Foundation today announced the availability of Release 3.0 of it's ever-popular IoT Security Assurance Framework. The Framework is a practical resource that helps IoT vendors provide fit-for-purpose security in their products and services. It is
Shortlist Announced for the IoT Security Champion Award 2021
We are delighted to announce the finalists for the 3rd IoT Security Foundation Champion Award. This award seeks to celebrate organisations which demonstrate stewardship when it comes to IoT security. In alphabetical order, they are: Angoka CENSIS Crypto Quantique EXPLIoT We would also like to thank all other organisations which
Consumer IoT sector – basic cybersecurity hygiene practice still not happening
November 4th, 2021: New Report on Industry Adoption of Vulnerability Disclosure Practice Published. The IoT Security Foundation has published its 4th report which examines the practice of vulnerability disclosure in Consumer IoT - with an extension into enterprise and the B2B model. The report is seen as a cybersecurity progress barometer of the sector
Major Update Released for IoTSF’s Vulnerability Disclosure Best Practice Guide
We’re delighted to announce Release 2 of our popular best practice guide on Vulnerability Disclosure Best Practice. This is an essential element of cybersecurity hygiene and was one of the first ever guides we published back in 2017 to support our mission to 'make it safe to connect'. So much has
Are we there yet?
When it comes to securing the Internet of Things “IoT”, the world cannot afford insanity, expecting different results from the same traditional ICT “cybersecurity”. No one can afford this.
Router and IoT Vulnerabilities: Insecure by Design
When directed to manage an IoT device or router using a browser, passwords and all communications are typically passed over an unencrypted connection. This is a security vulnerability which needs attention.
IoTSF Announces Sarb Sembhi Joins Executive Steering Board
August 2nd 2021 The IoT Security Foundation announced today that Sarb Sembhi, CTO of Virtually Informed, has joined its Executive Steering Board (ESB). Sarb has been a cybersecurity professional for over 20 years and an active member of IoTSF since 2018 where he has successfully helped establish and co-chair the Smart Built Environment Working
IoTSF Champion Award is Back in 2021 and Open for Applications
We're delighted to announce that applications for the prestigious IoT Security Foundation's Champion Award are now open and we're inviting you to apply.
TREs and the IoT – Enabling a Trusted Connected Future
The IoT landscape is notoriously under-secured. In the rush to meet demand for online products, services and infrastructure, many manufacturers have adopted a ‘connect first, think later’ strategy where security has been an afterthought. This has resulted in years of serious security and privacy breaches.