Mundo Ejecutivo USA’s Post

I've just been reading about the prosecution of Sellafield for some pretty serious Cyber Security failings and though I'd summarise them here for you in my very first carousel post!

Wondering how SASE can help protect your users? Check out our fictional use case of Warren Workmore below! #SASE #Security #Networks #Cloud #MSSP

Stealing a car? Easy - just get to the internal CAN bus, bypass the immobilizer, and boom, it starts. The tricky part? Remembering which piece of the car’s plastic you need to rip off! 😆 🤣 What you see in the video: Three junior car thieves try to break into internal CAN bus of the car to connect to internal network and unlock the car, but continuously stumble upon issues. It recorded in London during the last week of 2024. This type of attack is publicly known as a CAN injection attack. #technology #automotive #cybersecurity #security #cyber #cybercrime #threatintel #canbus

Protecting vehicles from attacks on the CAN Bus is a serious headache once physical access is involved. The CAN Bus, designed for efficiency over security, lacks encryption or authentication, meaning anyone connected can spoof or tamper with critical systems like brakes or steering. Physical access—via the OBD-II port or exposed wiring—opens the floodgates for hackers to send malicious commands. Detecting this kind of attack is nearly impossible since the CAN Bus can't tell legit messages from fake ones. Bottom line: if a hacker gets their hands on the hardware, your car's defenses are in for a rough ride. "Especially if they know what they're doing and aren't just following a YouTube tutorial."

487 GB of sensitive data has been stolen from Kawasaki Motors Europe (KME) 🏍 and leaked on the Tor site of a ransomware gang, fuelling speculation about the strategic objectives of KME and its preference for a data breach over the financial, legal and reputational costs that could come with paying a ransom 💰. It’s the unenviable dilemma facing most companies that fall prey to attackers. Read more 👇 Protect your team and data by adding MailGuard to your security stack. Our email filtering solutions are recommended by AustCyber and defend against advanced attacks up to 48 hours ahead of the rest of the market. Make time to talk to our team of experts about fortifying your inboxes.  

Good read to start 2025. If you are in law enforcement and see a vehicle that is commonly stolen going up the street with only one headlight on I suggest you pull it over. Consider it may have just been stolen. Video shows they cut the light harness. Connect a device to trick the other modules. What are the odds that a new vehicle has a burnt out headlight? More details in the following publication on how it works: https://lnkd.in/eS9mPKW6

Attackers and thieves are getting more and more creative. 🕵 So it's time to get more creative with security and verification too. ⛓️💥 If you would like to discover solutions for integrated and faster validation of control units and on-board communication, please let me know. #AutomotiveCybersecurity #ISO21434

This Video shows footage of a CAN injection attack, which in simple terms means that a thief breaks into the CAN bus of the car and after that achieves the permissions to unlock it and even start it. Attacks like these will continue in the future. If you are a product developer and want to assess the risks of complex cyber-physical systems like cars and all included subsystems you need a tool that supports you. Spreadsheets will fail ⛔ ! Our tool SECURE from itemis Cybersecurity helps you master your risk assessments and monitor the current risk landscape to achieve #securitybydesign Check out the toool here: https://lnkd.in/eXPGe8Zj

so easy... so terrifyingly easy... no internal security on the CAN bus... too high a cost for manufacturers to develop the security of vehicle IT systems

We have started disruption of a multitude of future #impersonation attacks targeting CrowdStrike customers, and #takedown of underlying #malicious infrastructure. some examples : crowdstrikedoomsday[.]com crowdstrikebluescreen[.]com crowdstrike0day[.]com crowdstrike-bsod[.]com crowdstriketoken[.]com crowdstrikedown[.]site crowdstrikefix[.]com There will be many #techsupport calls scams, impersonations of various degrees (airlines, etc.) and other criminals profiting of current disarray and people in distress. Let's keep attention up. #PreCrime #PredictiveSecurity #PreEmptiveDefense #Cybersecurity