Collaborate Disseminate
When attempting to secure something, whether it’s a computer, sensitive data, or valuables, there’s always going to be a way to break that security. It might be impossibly hard, like …read more Continue reading Automatically Crack Safes with this Autodialer
Last Friday Github saw a supply chain attack hidden in a popular Github Action. To understand this, we have to quickly cover Continuous Integration (CI) and Github Actions. CI essentially …read more Continue reading This Week in Security: The Github Supply Chain Attack, Ransomware Decryption, and Paragon
Laser microphones have been around since the Cold War. Back in those days, they were a favorite tool of the KGB – allowing spies to listen in on what was …read more Continue reading Spy Tech: Build Your Own Laser Eavesdropper
The WebUSB standard is certainly controversial. Many consider it a security risk, and, to date, only Chromium-based browsers support it. But there is a workaround that is, ironically, supposed to …read more Continue reading Add WebUSB Support To Firefox With a Special USB Device
Nobody likes spam messages, but some of them contain rather fascinating scams. Case in point, [Ben Tasker] recently got a few romance scam emails that made him decide to take …read more Continue reading My Scammer Girlfriend: Baiting a Romance Fraudster
We would be remiss if we didn’t address the X Distributed Denial of Service (DDoS) attack that’s been happening this week. It seems like everyone is is trying to make …read more Continue reading This Week in Security: The X DDoS, The ESP32 Basementdoor, and the camelCase RCE
Recently there was a panicked scrambling after the announcement by [Tarlogic] of a ‘backdoor’ found in Espressif’s popular ESP32 MCUs. Specifically a backdoor on the Bluetooth side that would give …read more Continue reading The ESP32 Bluetooth Backdoor That Wasn’t
The fine researchers at Google have released the juicy details on EntrySign, the AMD Zen microcode issue we first covered about a month ago. And to give away the punchline: …read more Continue reading This Week in Security: Zen Jailbreak, Telegram Exploit, and VMware Hyperjack
In case you weren’t aware, Apple devices around you are constantly scanning for AirTags. Now, imagine you’re carrying your laptop around – no WiFi connectivity, but BLE’s on as usual, …read more Continue reading Hijacking AirTag Infrastructure To Track Arbitrary Devices
Some of our devices look like they’re straight out of hacker movies. For instance, how about a small board you plant behind an RFID reader, collecting access card data and …read more Continue reading Here’s A Spy Movie-Grade Access Card Sniffing Implant