Collaborate Disseminate
Researchers say they reported what they consider to be a privacy hole to Apple in 2019, but never heard back. They worked on a fix anyway. Continue reading Apple AirDrop has “significant privacy leak”, say German researchers
The Kazakh government is forcing its citizens to install a spyware root certificate, allowing authorities to crack open TLS traffic, such as HTTPS.
The post Kazakhstan Spies on its People via Man-in-the-Middle Attack, Again appeared first on Security … Continue reading Kazakhstan Spies on its People via Man-in-the-Middle Attack, Again
By Sudais Asif
The attacks carried out by exploiting BLURtooth vulnerability are being referred to as the BLUR attacks.
This is a post from HackRead.com Read the original post: BLURtooth vulnerability exposes devices to MITM attack
Continue reading BLURtooth vulnerability exposes devices to MITM attack
The “BLURtooth” flaw allows attackers within wireless range to bypass authentication keys and snoop on devices utilizing implementations of Bluetooth 4.0 through 5.0. Continue reading Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks
By Sudais Asif
The vulnerability was revealed in a report called “The EMV Standard: Break, Fix, Verify.” Every time we make a payment using credit/debit cards, the EMV communication protocol is used for processing payments. Having been deve… Continue reading New vulnerability lets hackers use your credit card without pin code
How to stay safe when you’re using Tor, even if the network is littered with rogues. Continue reading Tor and anonymous browsing – just how safe is it?
The two flaws allow man-in-the-middle attacks that would give an attacker access to all data flowing through the router. Continue reading ASUS Home Router Bugs Open Consumers to Snooping Attacks
Based in the US as Hackaday is, it’s easy to overload the news with stories from home. That’s particularly true with dark tales of the expanding surveillance state, which seem to just get worse here on a daily basis. So we’re not exactly sure how we feel to share not …read more
By Johanna Amann, Software Engineer, Corelight CVE-2020-13777 is a high severity issue in GnuTLS. In a nutshell, GnuTLS versions between 3.6.4 (released 2018-09-24) and 3.6.14 (2020-06-03) have a serious bug in their session resumption code, which lets… Continue reading Detecting GnuTLS CVE-2020-13777 using Zeek
ESET researchers found serious security vulnerabilities in three different home hubs: Fibaro Home Center Lite, HomeMatic Central Control Unit (CCU2) and eLAN-RF-003. Some of the flaws could be misused by an attacker to perform MitM attacks, eavesdrop o… Continue reading Multiple vulnerabilities discovered in smart home devices