Collaborate Disseminate
Last week we covered the latest 0-day from NSO group, BLASTPASS. There’s more details about exactly how that works, and a bit of a worrying revelation for Android users. One …read more Continue reading This Week in Security: WebP, Cavium, Gitlab, and Asahi Lina
There’s yet another 0-day exploit chain discovered as part of NSO Group’s Pegasus malware suite. This one is known as BLASTPASS, and it’s a nasty one. There’s no user interaction …read more Continue reading This Week in Security: Blastpass, MGM Heist, and Killer Themes
There was a time when a car was a machine, one which only came to life when its key was turned, and functioned simply as a way to get its …read more Continue reading Your Car is a Privacy Nightmare On Wheels
There has been a rash of cryptocurrency thefts targeting some unexpected victims. Over $35 million has been drained from just over 150 individuals, and the list reads like a who’s-who …read more Continue reading This Week in Security: LastPass Shoe Drops, Keys Lost, and Train Whistles Attack
A subset of hackers have RFID implants, but there is a limited catalog. When [Miana] looked for a device that would open a secure door at her work, she did …read more Continue reading Bespoke Implants are Real—if You put in the Time
Curl was recently notified of a CVE, CVE-2020-19909, rated at a hair-raising 9.8 on the CVSS scale. And PostgreSQL has CVE-2020-21469, clocking in with a 7.5 severity. You may notice …read more Continue reading This Week in Security: Not a Vulnerability, BGP Bug Propogation, and Press Enter to Hack
The average Starlink user probably doesn’t spend a lot of time thinking about their hardware after getting the dish aligned and wiring run. To security researchers, however, it’s another fascinating …read more Continue reading Diving into Starlink’s User Terminal Firmware
International cybercrime, as portrayed by the movies and mass media, is a high-stakes game of shadowy government agencies and state-sponsored hacking groups. Hollywood casting will wheel out a character in …read more Continue reading GTA 6 Hacker Found to Be Teen With Amazon Fire Stick In Small Town Hotel Room
Security Engineer [Guillaume Quéré] spends the day penetration testing systems for their employer and has pointed out and successfully exploited a rather obvious weakness in the BitLocker full volume encryption …read more Continue reading Bypassing Bitlocker with a Logic Analzyer
Over the years we’ve covered a lot of attempts by relatively clueless governments and politicians to enact think-of-the-children internet censorship or surveillance legislation, but there’s a law from France in …read more Continue reading Liberté, égalité, fraternité: France Loses Its Marbles On Internet Censorship