The Increased Liability of Local In-home Propagation

Today I discuss an attack vector conducive to cross-organizational spread, in-home local propagation. Though often overlooked, this vector is especially relevant today, as many corporate employees remain working from home. In this post, I contrast in-home local propagation with traditional vectors through which a threat (ransomware in particular) spreads throughout an organization. I discuss the…

Point Pickup acquires e-commerce platform GrocerKey for $42M to allow for same-day delivery – TechCrunch

Point Pickup Technologies, a last-mile delivery service, has acquired white label e-commerce platform GrocerKey for $42 million, according to the company. With the acquisition, Point Pickup now allows retailers to offer same-day delivery, from purchase to fulfillment to delivery, under their own brand name, rather than under third parties like Instacart. Instacart made a killing…

B. Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

Cybersecurity researchers have disclosed five previously unreported security vulnerabilities affecting B. Braun’s Infusomat Space Large Volume Pump and SpaceStation that could be abused by malicious parties to tamper with medication doses without any prior authentication. McAfee, which discovered and reported the flaws to the German medical and pharmaceutical device company on January 11, 2021, said…