Author: Robert Timlick

  • Portland-based ChEmpower raises $18M series A for chipmaking technology

    Portland-based ChEmpower raises $18M series A for chipmaking technology

    ChEmpower develops abrasive-free planarization technology for semiconductor manufacturing.
  • North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures

    North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures

    North Korea-linked threat actors behind the Contagious Interview have set up front companies as a way to distribute malware during the fake hiring process.
    “In this new campaign, the threat actor group is using three front companies in the cryptocurrency consulting industry—BlockNovas LLC (blocknovas[.] com), Angeloper Agency (angeloper[.]com), and SoftGlide LLC (softglide[.]co)—to spread
  • All About the New U.S. Cyber Trust Mark

    All About the New U.S. Cyber Trust Mark

    The Cyber Trust Mark is a new smart device label created by the US government to prove that a device is safe. Internet of Things (IOT) devices have risen in popularity recently. Devices like smart thermostats and baby monitors make our lives easier, but also open us up to cyber threats. 

    There were over 112 million IoT cyber attacks worldwide in 2022, and this number continues to grow. With an increase in AI-powered attacks, an 82% increase was expected in 2024. The United States created new standards to confirm a device is safe. 

    As a result, you may see a shield with the “U.S. Cyber Trust Mark” when device shopping. Let’s take a look at what this means and how you can use this new feature next time you make a purchase. 

    What is the Cyber Trust Mark?

    Smart devices are everywhere nowadays, from our homes to offices. Yet, some such devices are still insecure, leaving openings for hackers to steal our info and spy on us. In 2023, TVs, smart plugs, and digital video recorders had the most IoT vulnerabilities and attacks. Many more types of devices may be dangerous without our knowledge. 

    This problem is now being solved through the Cyber Trust Mark. It will tell you which device is safe without a doubt. Even if you’re not tech-savvy, you can purchase with confidence.  

    How Does a Device Get the Cyber Trust Mark?

    To get the U.S. Cyber Trust Mark, a device has to undergo tests to verify its security. These tests cover several points and examine things like:

    First, the device should have strong passwords. Weak passwords are easily guessed by hackers. This is one of the most common ways cybercriminals hack into devices. Next, the device should keep your information safe. It should use appropriate methods to lock up your data for privacy and security. 

    The device should also be regularly updated. These updates fix problems and keep the device safe from hackers. Devices with frequent updates are more secure than others. 

    How Often are the Standards That Define the Cyber Trust Mark Updated?

    The standards of the mark will change over time. New threats keep appearing, and the government will update the standards to cope with these. This way, the mark will always stand for good security.

    Retesting of the devices might sometimes be necessary. This helps to ensure that they still meet the standards.

    How Can Companies Get the Mark for Their Devices?

    Companies have to apply to get the mark. They send their devices for testing, and if it passes, it gets the mark. The company can then put the mark on the box of the device.

    This requires time and costs, but it’s worth it for businesses. It can help them sell more devices with an increase in consumer trust. 

    When Will We See the Cyber Trust Mark?

    It is new, but the mark will start showing up on devices soon. They want stores to start using it immediately, meaning the next time we go shopping, we may see it. Many types of smart devices may obtain the Cyber Trust Mark, including but not limited to the following:

    • Smart TVs
    • Smart speakers
    • Security cameras
    • Smart thermostats
    • Smart locks

    How Does the Mark Help Consumers?

    The Cyber Trust Mark makes shopping simpler. It doesn’t require any technical knowledge. All you have to do is look for the mark to confirm which device is safe. 

    The mark also encourages companies to make safer devices. They want the mark, so they work harder at security.

    What if a Device Doesn’t Have the Mark?

    If a device doesn’t have the mark, that doesn’t mean it’s not safe. In this case, you should look into its safety features. You may also ask the store or check online for more information.

    Wherever possible, it’s best to choose devices that carry the mark. This way, you can be sure they have passed important safety tests.

    What to Do If You Already Have Smart Devices?

    If you already have smart devices, don’t worry. You can still take steps to make them safer, even without the trust mark. 

    Here are some tips:

    • Change default passwords 
    • Keep the software updated 
    • Turn off features you don’t use 
    • Use a strong Wi-Fi password

    Follow these steps to help protect your devices and your info.

    What’s Next for Smart Device Safety?

    The Cyber Trust Mark is a big step for device safety, but it’s just the beginning. We’ll see more changes in the future. These may include:

    • Stricter standards for the mark
    • More types of devices getting the mark
    • Better ways to test device safety

    The goal is to make all our smart devices safer to protect our info and our privacy. For now, the mark will only apply within the U.S., but other countries may create something similar in the future. 

    Stay Safe and Smart

    The Cyber Trust Mark helps us in making informed choices; it’s an easy way to know what devices are safe. When you shop, look for the mark. It’s your sign of a trustworthy device.

    Keep in mind that device safety is constantly changing. Keep yourself informed about new threats and safety tips. 

    If you have any questions about device safety, don’t be afraid to ask. Contact us today for help making your smart home safe and secure.

    —

    Featured Image Credit

    This Article has been Republished with Permission from The Technology Press.

  • SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers

    SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers

    Threat actors are likely exploiting a new vulnerability in SAP NetWeaver to upload JSP web shells with the goal of facilitating unauthorized file uploads and code execution. 
    “The exploitation is likely tied to either a previously disclosed vulnerability like CVE-2017-9844 or an unreported remote file inclusion (RFI) issue,” ReliaQuest said in a report published this week.
    The cybersecurity
  • Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers

    Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers

    Cybersecurity researchers have disclosed three security flaws in the Rack Ruby web server interface that, if successfully exploited, could enable attackers to gain unauthorized access to files, inject malicious data, and tamper with logs under certain conditions.
    The vulnerabilities, flagged by cybersecurity vendor OPSWAT, are listed below –

    CVE-2025-27610 (CVSS score: 7.5) – A path traversal

  • 3 takeaways from the Greater Portland Inc. Economic Nexus

    3 takeaways from the Greater Portland Inc. Economic Nexus

    A discussion with a JLL senior managing director and Portland City Council president sparked a discussion on how the city can better market itself to new business.
  • Portland apparel brand explains 10% price increase in response to tariffs

    Portland apparel brand explains 10% price increase in response to tariffs

    Portland Gear’s best-selling backpacks and bags are made in Vietnam, Harvey said, a country that President Donald Trump has imposed a 46% tariff on.
  • Portland will cut ‘core services’ by 20% to restructure, help close budget gap

    Portland will cut ‘core services’ by 20% to restructure, help close budget gap

    City Administrator Mike Jordan announced Wednesday that there will be 20% cuts to “core services” over the next year to align with Portland’s restructuring since officially abandoning the old bureau system at the start of 2025.
  • Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Zero-Day and ThreatNeedle Malware

    Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Zero-Day and ThreatNeedle Malware

    At least six organizations in South Korea have been targeted by the prolific North Korea-linked Lazarus Group as part of a campaign dubbed Operation SyncHole.
    The activity targeted South Korea’s software, IT, financial, semiconductor manufacturing, and telecommunications industries, according to a report from Kaspersky published today. The earliest evidence of compromise was first detected in
  • Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

    Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

    Cybersecurity researchers have demonstrated a proof-of-concept (PoC) rootkit dubbed Curing that leverages a Linux asynchronous I/O mechanism called io_uring to bypass traditional system call monitoring.
    This causes a “major blind spot in Linux runtime security tools,” ARMO said.
    “This mechanism allows a user application to perform various actions without using system calls,” the company said in