A Review of the Best News of the Week on AI, IoT, & Mobile Security

U.S. Mulls Curbs on Artificial Intelligence Exports (SecurityWeek, Nov 20 2018)
The administration of US President Donald Trump is exploring curbing exports of sensitive technologies including artificial intelligence for national security reasons, according to a proposal this week.

Mobile and IoT attacks – SophosLabs 2019 Threat Report (Naked Security – Sophos, Nov 23 2018)
As internet users migrate from desktop and laptop computers to mobile and Internet of Things (IoT) platforms, cybercriminals are too.

More details on One Planet York app vulnerability don’t paint council in a good light (Graham Cluley, Nov 27 2018)
the curious story of how a vulnerability was found in the City of York council’s recycling app, and the council’s response to being told about the data-spilling flaw.


Without data, your security strategy is just a guess.
The Mosaic Security Research Market Intelligence Platform provides the data you need for OWASP’s Cyber Defense Matrix. Learn a new way to conduct a strategy assessment.


MIT’s Investment in AI a Harbinger of What is to Come (Infosecurity Magazine, Nov 21 2018)
MIT is boldly investing in preparing students for a world that will be recalibrated by AI.

AI and Robots and IoT, Oh My! Nine Tech Predictions for 2019 (eWEEK, Nov 23 2018)
Expect more “digital workers” while CIOs focus less on the day-to-day and more on digital transformation in 2019. These are just a couple of predictions Forrester is making about the coming year.

Mirai Evolves From IoT Devices to Linux Servers (Dark Reading, Nov 21 2018)
Netscout says it has observed at least one dozen Mirai variants attempting to exploit a recently disclosed flaw in Hadoop YARN on Intel servers.

The current state of cybersecurity in the connected hospital (Help Net Security, Nov 26 2018)
Only 15% of physicians and 45% of administrators report having seen or read advisories related to medical device security in the last six months.

Researchers Use Smart Bulb for Data Exfiltration (SecurityWeek, Nov 26 2018)
Researchers with software risk measurement and management company Checkmarx were able to create two mobile applications that abuse the functionality of smart bulbs for data exfiltration.

Google Maps scammers put their own phone numbers onto bank listings (Naked Security – Sophos, Nov 27 2018)
Once they get victims on the phone, the crooks get their account PINs and CVV numbers for debit/credit cards and then drain their accounts.

The state of BYOD and mobile device security (Help Net Security, Nov 21 2018)
Organizations are embracing BYOD, making it available to employees (76 percent), contractors (27 percent), partners (25 percent), customers (22 percent), and suppliers (19 percent).

Malvertising in Apple Pay Targets iPhone Users (Infosecurity Magazine, Nov 20 2018)
Malicious advertising on newspaper and magazine websites is targeting iPhone users.

13 Malware-Laden Fake Apps on Google Play (Infosecurity Magazine, Nov 21 2018)
A security researcher uses Twitter to warn users about 13 malicious Android apps.

Local law enforcement using mysterious new tool to unlock cellphones (WHIO | Dayton News, Nov 22 2018)
Law enforcement agencies are using a mysterious new tool to unlock the cellphones of criminal suspec

Turn Off Siri on Your Lock Screen for Better iOS Security (Wired, Nov 23 2018)
Every new version of iOS seems to bring with it a fresh lock screen bypass. Head the next one off by shushing Siri on your lock screen.