This Week in Security: Lingering Spectre, Deep Fakes, and CoreAudio

Spectre lives. We’ve got two separate pieces of research, each finding new processor primitives that allow Spectre-style memory leaks. Before we dive into the details of the new techniques, let’s …read more Continue reading This Week in Security: Lingering Spectre, Deep Fakes, and CoreAudio

This Week in Security: Encrypted Messaging, NSO’s Judgement, and AI CVE DDoS

Cryptographic messaging has been in the news a lot recently. Like the formal audit of WhatsApp (the actual PDF). And the results are good. There are some minor potential problems …read more Continue reading This Week in Security: Encrypted Messaging, NSO’s Judgement, and AI CVE DDoS

This Week in Security: Target Coinbase, Leaking Call Records, and Microsoft Hotpatching

We know a bit more about the GitHub Actions supply chain attack from last month. Palo Alto’s Unit 42 has been leading the charge on untangling this attack, and they’ve …read more Continue reading This Week in Security: Target Coinbase, Leaking Call Records, and Microsoft Hotpatching