Collaborate Disseminate
Fail2ban is a great tool for dynamically blocking IP addresses that show bad behavior, like making repeated login attempts. It was just announced that a vulnerability could allow an attacker …read more Continue reading This Week in Security: Fail2RCE, TPM Sniffing, Fishy Leaks, and Decompiling
We’re surrounded by interesting engineering, but some of it is sealed inside a housing, away from easy inspection. A case in point; the humble gas regulator. It’s in equipment all …read more Continue reading Seeing Inside a Gas Regulator
The NSO Group has been in the news again recently, with multiple stories reporting on their Pegasus spyware product. The research and reporting spearheaded by Amnesty International is collectively known …read more Continue reading This Week in Security: NSO, Print Spooler, and a Mysterious Decryptor
The funniest thing happened to REvil this week. Their online presence seems to have disappeared. Their Tor sites as well as conventional sites all went down about the same time …read more Continue reading This Week is Security: REvil Goes Dark, Kaseya Cleanup, Android Updates, And Terrible Firmware
There’s a lot happening in the world of Pi. Just when we thought the Raspberry Pi Foundation were going to take a break, they announced a new PoE+ HAT (Hardware …read more Continue reading Hands On With the Raspberry Pi POE+ HAT
You may remember the Pipewire coverage we ran a couple weeks ago, and the TODO item to fix up Firewire device support with Pipewire. It turns out that this is …read more Continue reading The Linux Kernel 5.14 Audio Update
For the second time, Microsoft has attempted and failed to patch the PrintNightmare vulnerability. Tracked initially as CVE-2021-1675, and the second RCE as CVE-2021-34527. We warned you about this last …read more Continue reading This Week in Security: Print Nightmare Continues, Ransomware Goes Bigger, And ATM Jackpots!
Ah, phone phreaking. Some of us are just old enough to remember the ubiquity of land lines, but just young enough to have missed out on the golden years of …read more Continue reading Evan Doorbell’s Telephone World
Code signing is the silver bullet that will save us from malware, right? Not so much, particularly when vendors can be convinced to sign malicious code. Researchers at G DATA …read more Continue reading This Week in Security: Bad Signs from Microsoft, An Epyc VM Escape
There’s been yet another technique discovered to fingerprint users, and this one can even work in the Tor browser. Scheme flooding works by making calls to application URLs, something like …read more Continue reading This Week in Security: Schemeflood, Modern Wardialing, And More!