The FBI and CISA have issued new guidance regarding the potential risks posed by Chinese-made drones to critical infrastructure. The guidance advises companies to ensure that their drones are using up-to-date patches and to treat drones as IoT devices, siloing their network traffic and performing regular log analysis. Researchers have also discovered nine vulnerabilities in the open source UEFI specification TianoCore EDK II that could be used to download malicious firmware to a server by capturing local traffic. On a different note, the leak alert site Have I Been Pwned has added a “statistically significant” dataset to its listings, containing over 70 million unique email addresses with associated plaintext passwords. Additionally, Trail of Bits has reported on vulnerabilities in GPUs that could enable attackers to exfiltrate memory data, warning of a significant potential risk. The Internet Watch Foundation has found that the majority of child sexual abuse imagery is now self-generated rather than being reshared content. However, the IWF has taken this as an opportunity to advocate against end-to-end encryption in the UK, arguing that better detection is the reason behind the increase.
Drone threats, PixieFail firmware, HIBP dataset: a data adventure
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-58.jpg)
Latest from News
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-8-720x480.jpg)
CISA, FBI, DC3 alert: Watch out for Iran-based ransomware attacks
TLDR: CISA, FBI, and DC3 have issued an alert warning of Iran-based ransomware attacks targeting U.S. organizations. The cyber actors are connected to the
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-46-720x480.jpg)
Are your funds secure with two-factor authentication? Think again
TLDR: Two-factor authentication (2FA) is a crucial tool in preventing cybercrime, but it has its limitations. While 2FA adds an extra layer of security,
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-38-720x480.jpg)
Black Hat 2024 Cybersecurity Pulse Report – Don’t Miss Out
Cybersecurity Pulse Report Summary TLDR: Key Points Cybersecurity Pulse Report Black Hat 2024 Edition provides expert insights into critical security challenges. AI-driven analysis compiles
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-32-720x480.jpg)
Moody’s: Cyber Insurance Competition Rises, Prices Fall
Moody’s Ratings Article Summary TLDR: Key Points: Cyber insurance market poised for growth as cyberattacks increase. New entrants in the market may lead to
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-78-720x480.png)
Gen Alpha: Cybersecurity meets AI in a digital era
TLDR: Generation Alpha, children of Millennials, are growing up in an AI-native world where AI is an integral part of daily life. Cybersecurity in