Collaborate Disseminate
Quarkslab finds serious, remotely exploitable vulnerabilities in EDK II, the de-facto open source reference implementation of the UEFI spec.
The post Remotely Exploitable ‘PixieFail’ Flaws Found in Tianocore EDK II PXE Implementation appeared first on … Continue reading Remotely Exploitable ‘PixieFail’ Flaws Found in Tianocore EDK II PXE Implementation
The results of two audits of the open source software OpenVPN were shared late last week. One found two legitimate vulnerabilities, the other said the service is cryptographically “solid.” Continue reading OpenVPN Audits Yield Mixed Bag
An audit of open source file and disk encryption software VeraCrypt wrapped up and a number of critical vulnerabilities uncovered in the assessment were patched. Continue reading VeraCrypt Patches Critical Vulnerabilities Uncovered in Audit
Missing emails between the parties involved in an audit of VeraCrypt, which began today, are now being blamed on errors in mail.app and GPGMail. Continue reading VeraCrypt Audit Under Way; Email Mystery Cleared Up