Every yr hackers descend on Las Vegas within the sweltering August warmth to interrupt floor on safety analysis and probably the most progressive hacks. This yr was no completely different, even when it was digital.
To title a couple of: Hackers tricked an ATM to spit out money. A duo of safety researchers found out a approach to detect the newest cell website simulators. Car researchers efficiently hacked right into a Mercedes-Benz. A Windows bug some 20 years previous can be utilized to plant malware. Cryptocurrency exchanges had been extraordinarily weak to hackers for a time. Internet satellites are extra insecure than we thought and their knowledge streams can comprise delicate, unencrypted knowledge. Two safety researchers lived to inform the story after they had been arrested for a wholly authorized bodily penetration take a look at. And, a former NSA hacker revealed learn how to plant malware on a Mac utilizing a booby-trapped Word doc.
But with lower than three months till tens of millions of Americans go to the polls, Black Hat sharpened its give attention to election safety and integrity extra so than any earlier yr.
Here’s extra from the week.
THE BIG PICTURE
A serious voting machine maker is lastly opening as much as hackers
The relationship between hackers and election machine producers has been nothing in need of fraught. No firm desires to see their merchandise torn aside for weaknesses that may very well be exploited by international spies. But one firm, as soon as proof against the safety group, has began to indicate indicators of compromise.
Election gear maker ES&S is opening up its voting machines to hackers — willingly — underneath a brand new vulnerability disclosure program. That will see the corporate embrace hackers for the primary time, recognizing that hackers have information, perception and expertise — somewhat than pushing them away and ignoring the issues altogether. Or, as the corporate’s safety chief informed Wired: “Hackers gonna hack, researchers gonna analysis.”