It was a busy week in security. Changes are underway in the US government as a result of the OPM hack, and a new department is being launched to take control of data privacy.
Meanwhile, FireEye CIO Julie Cullivan told V3 that web users need to take more responsibility for how they share data online.
In other news, a shocking security blunder was found in Lenovo products that included an internet default password being set to '12345678'.
Read on for the top security stories of the week from V3:
IoT firms 'sleepwalking into danger' as security goes unchecked
The rapid expansion of IoT technology without a strong focus on security will leave devices increasingly open to attack and exploitation, according to John Moor, director of the Internet of Things Security Foundation.
Web users should take more responsibility for data privacy, warns FireEye CIO
Internet users need to better understand data privacy and the consequences of losing personal information in the wake of breaches at companies such as Target and TalkTalk, according to Julie Cullivan, chief information officer at security firm FireEye.
DDoS world record broken with 500Gbps attack in 2015
Distributed denial-of-service attacks look set to rise in 2016 after research indicated that the crippling assaults reached a high of 500Gbps in 2015 and that the average attack size more than doubled over the year.
Rogue Google browser extension found spying on users
A rogue Google extension was granting invasive permissions that let the app spy on user activity, according to security firm Malwarebytes.
Lenovo blunder means '12345678' used as password for default file sharing app
Lenovo was forced to release urgent software fixes after a number of embarrassing flaws were uncovered in its products, including one that left a hard-coded password set to '12345678' by default.
Government announces £250,000 fund to help UK cyber security startups blossom
The UK government announced the Cyber Security Early Stage Accelerator Programme that will offer advice and support to security startups. A total of £250,000 will be ploughed into the scheme.
Security industry should embrace the dark web to root out cyber threats
Underground marketplaces on the dark web are a breeding ground for hackers and cyber attack tools, and security firms should take advantage of it as a source of threat intelligence, according to ThreatStream.
US government changes personnel data processing after OPM hack
The US government unveiled plans for the Department of Defence to take control of federal background checks following the attack on the Office of Personnel Management last year.
Intel wants to get inside your car, despite missing out on mobile
'We'll keep fighting to fight to keep the web free and open,' claim EFF
Breached in March by the same attackers, claim 'insiders'
And all for less than £150, according to Keith