Collaborate Disseminate
As I prepare a presentation for a government agency, I’ve been thinking quite a bit about the idea of “program execution”. I’ve actually blogged on this topic before, and I thought that maybe now was a good time to revisit the topic.What does tha… Continue reading Revisiting Program Execution
Remember rowhammer vulnerability? A critical issue affecting modern DRAM (dynamic random access memory) chips that could allow attackers to obtain higher kernel privileges on a targeted system by repeatedly accessing memory cells and induce bit flips.
… Continue reading Poor Rowhammer Fixes On DDR4 DRAM Chips Re-Enable Bit Flipping Attacks
It appears there is no end in sight to the hardware level security vulnerabilities in Intel processors, as well as to the endless ‘performance killing’ patches that resolve them.
Modern Intel CPUs have now been found vulnerable to a new attack that in… Continue reading LVI Attacks: New Intel CPU Vulnerability Puts Data Centers At Risk
A federal judge in New York on Monday declared a mistrial in the case of a former CIA software engineer who was accused of stealing a massive trove of the agency’s classified hacking and tools and leaking it to WikiLeaks whistleblower website.
While t… Continue reading Ex-CIA Accused of Leaking Secret Hacking Tools to WikiLeaks Gets Mistrial
The US-CERT today issued advisory warning users of a new dangerous 17-year-old remote code execution vulnerability affecting the PPP daemon (pppd) software that comes installed on almost all Linux based operating systems, as well as powers the firmware… Continue reading Critical PPP Daemon Flaw Opens Most Linux Systems to Remote Hackers
Cybersecurity researchers today uncovered a new high-severity hardware vulnerability residing in the widely-used Wi-Fi chips manufactured by Broadcom and Cypress—apparently powering over a billion devices, including smartphones, tablets, laptops, route… Continue reading New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices
If you use the Firefox web browser, here’s an important update that you need to be aware of.
Starting today, Mozilla is activating the DNS-over-HTTPS security feature by default for all Firefox users in the U.S. by automatically changing their DNS ser… Continue reading Firefox enables DNS-over-HTTPS by default (with Cloudflare) for all U.S. users
OpenSMTPD has been found vulnerable to yet another critical vulnerability that could allow remote attackers to take complete control over email servers running BSD or Linux operating systems.
OpenSMTPD, also known as OpenBSD SMTP Server, is an open-so… Continue reading New OpenSMTPD RCE Flaw Affects Linux and OpenBSD Email Servers
Almost within a year after releasing Microsoft Defender Advanced Threat Protection (ATP) for macOS computers, Microsoft today announced a public preview of its antivirus software for various Linux distributions, including Ubuntu, RHEL, CentOS and Debia… Continue reading Microsoft Brings Defender Antivirus for Linux, Coming Soon for Android and iOS
Based on a Twitter thread from 19 Feb 2020, during which Phill Moore made the request, I updated RegRipper to check for “dirty” hives, and provided a warning that RegRipper does NOT automatically process Registry transaction logs. This can be an … Continue reading RegRipper Update