A Review of the Best News of the Week on AI, IoT, & Mobile Security

Secure AI is the foundation of trustworthy AI (Help Net Security, Jun 30 2021)
AI-based recommendation systems are used in many online services we enjoy today, including search engines, online shopping sites, streaming services, and social media. However, their growing influence over what people see and do on the internet has raised concerns about their susceptibility to various types of abuse, such as their active use to spread disinformation and promote conspiracy theories. Andy Patel, a researcher with cybersecurity provider F-Secure’s Artificial Intelligence Center of

Apps with 5.8 million Google Play downloads stole users’ Facebook passwords (Ars Technica, Jul 02 2021)
Researchers uncovered 9 apps that used a sneaking method to pilfer credentials.

This Hacker Broke Into His School’s HVAC Before Thermostats Became ‘Smart’ (VICE, Jul 02 2021)
In the latest episode of the My First Hack series, Andrew Tierney—better known as Cybergibbons—tells the story of the time he discovered he could use his telephone to control his school’s heating system.


Filter Out the Noise
Since I started this curated security news in June 2017, I’ve clipped ~19,000 articles and narrowed them down into the best 20 per day & best 15 per week. This is my favorite way to cut through all the security marketing and hype. If you’re enjoying it, tell a friend. If you hate it, tell an enemy.
Thanks! – Lucas Samaras

Share today’s post on Twitter Facebook LinkedIn


There’s no reason to fear AI-powered malware (SC Media, Jun 30 2021)
Today’s columnist, Andrew Patel of F-Secure, writes how he’s optimistic that bad actors injecting AI-powered malware could be stopped by red teams and security audits.

Amazon Echo Dots Store a Wealth of Data—Even After a Reset (Wired, Jul 05 2021)
Thinking about selling your smart speaker? Be aware that you can’t completely delete personal content from the device.

US hits anti-robocall milestone but annoying calls won’t stop any time soon (Ars Technica, Jul 02 2021)
Large carriers deploy STIR/SHAKEN. Small carriers, old landlines are still problems.

How mobile operators view security in the 5G era (Help Net Security, Jul 02 2021)
There’s a major gap in security capability among mobile operators, which in many cases is not yet being filled by industry partnerships, Trend Micro reveals. In the 5G era, and a rapidly changing digital landscape, operators could broaden their security credentials with partners as they look to deliver on their desire to secure private networks.

How do I select a mobile threat defense solution for my business? (Help Net Security, Jul 06 2021)
In an almost exclusively mobile world and the increased usage of mobile devices to access corporate data, cybercriminals started taking advantage of the vulnerability of such devices. As a result, cyberattacks on mobile devices have skyrocketed. To select a suitable mobile threat defense solution for your business, you need to think about a variety of factors. We’ve talked to several industry professionals to get their insight on the topic. Michael Covington, VP of Product Strategy, … More →

Th

Worldwide wireless 5G connections reach 298 million in Q1 2021 (Help Net Security, Jul 04 2021)
The state of the race for the fifth generation of wireless (5G) subscriber adoption has tightened up significantly, as global wireless 5G connections for Q1 2021 reached 298 million, according to data from Omdia reported by 5G Americas. 5G subscriptions for 4Q20 were revised following improved clarity from one large country in the Asia-Pacific region, which resulted in a downward revision. Chris Pearson, President of 5G Americas said, “By all metrics, the interest and uptake … More →

The post W

App Stores Remove Ride-Hailing Giant Didi Chuxing (Infosecurity Magazine, Jul 05 2021)
Regulator says Chinese firm in violation of data collection rules

Putin’s Phone-in Hit by ‘Cyberattacks’ (SecurityWeek, Jun 30 2021)
A televised phone-in with Russian President Vladimir Putin Wednesday was targeted by “powerful” cyberattacks, the state-run Rossiya 24 network which broadcast the event said.