Collaborate Disseminate
There has been a rash of cryptocurrency thefts targeting some unexpected victims. Over $35 million has been drained from just over 150 individuals, and the list reads like a who’s-who …read more Continue reading This Week in Security: LastPass Shoe Drops, Keys Lost, and Train Whistles Attack
A subset of hackers have RFID implants, but there is a limited catalog. When [Miana] looked for a device that would open a secure door at her work, she did …read more Continue reading Bespoke Implants are Real—if You put in the Time
Curl was recently notified of a CVE, CVE-2020-19909, rated at a hair-raising 9.8 on the CVSS scale. And PostgreSQL has CVE-2020-21469, clocking in with a 7.5 severity. You may notice …read more Continue reading This Week in Security: Not a Vulnerability, BGP Bug Propogation, and Press Enter to Hack
The average Starlink user probably doesn’t spend a lot of time thinking about their hardware after getting the dish aligned and wiring run. To security researchers, however, it’s another fascinating …read more Continue reading Diving into Starlink’s User Terminal Firmware
International cybercrime, as portrayed by the movies and mass media, is a high-stakes game of shadowy government agencies and state-sponsored hacking groups. Hollywood casting will wheel out a character in …read more Continue reading GTA 6 Hacker Found to Be Teen With Amazon Fire Stick In Small Town Hotel Room
Security Engineer [Guillaume Quéré] spends the day penetration testing systems for their employer and has pointed out and successfully exploited a rather obvious weakness in the BitLocker full volume encryption …read more Continue reading Bypassing Bitlocker with a Logic Analzyer
Over the years we’ve covered a lot of attempts by relatively clueless governments and politicians to enact think-of-the-children internet censorship or surveillance legislation, but there’s a law from France in …read more Continue reading Liberté, égalité, fraternité: France Loses Its Marbles On Internet Censorship
Up first is a clever attack against VPNs, using some clever DNS and routing tricks. The technique is known as TunnelCrack (PDF), and every VPN tested was vulnerable to one …read more Continue reading This Week in Security: TunnelCrack, Mutant, and Not Discord
It must be Blackhat/DEFCON season. Up first in the storm of named vulnerabilities, we have Downfall. The PDF has the juicy details here. It’s quite similar to the Zenbleed issue …read more Continue reading This Week in Security: It’s Con Season
Many of us like a keyboard with a positive click noise when we type. You might want to rethink that, though, in light of a new paper from the UK …read more Continue reading Noisy Keyboards Sink Ships