Collaborate Disseminate
Up first is a clever attack against VPNs, using some clever DNS and routing tricks. The technique is known as TunnelCrack (PDF), and every VPN tested was vulnerable to one …read more Continue reading This Week in Security: TunnelCrack, Mutant, and Not Discord
It must be Blackhat/DEFCON season. Up first in the storm of named vulnerabilities, we have Downfall. The PDF has the juicy details here. It’s quite similar to the Zenbleed issue …read more Continue reading This Week in Security: It’s Con Season
Many of us like a keyboard with a positive click noise when we type. You might want to rethink that, though, in light of a new paper from the UK …read more Continue reading Noisy Keyboards Sink Ships
If you’ve answered as many spam calls as I have, you probably hear the warranty scam robocall in your sleep: “We’ve been trying to reach you about your car’s extended …read more Continue reading This Week in Security: Your Car’s Extended Warranty, Seizing the Fediverse, and Arm MTE
Up first is Zenbleed, a particularly worrying speculative execution bug, that unfortunately happens to be really simple to exploit. It leaks data from function like strlen, memcpy, and strcmp. It’s …read more Continue reading This Week in Security: Zenbleed, Web Integrity, and More!
As the old saying goes, there’s no such thing as a lock that can’t be picked. However, it seems like there are plenty of examples of car manufacturers that refuse …read more Continue reading Car Security System Monitors Tiny Voltage Fluctuations
Up first this week is a report from vpnMentor, covering the unsecured database backing a set of dating apps, including 419 Dating. The report is a bit light on the …read more Continue reading This Week in Security: Dating App, WooCommerce, and OpenSSH
There are a huge number of products available in the modern world that come with network connectivity now, when perhaps they might be better off with out it. Kitchen appliances …read more Continue reading Remote Code Execution on an Oscilloscope
USB devices are now ubiquitous and, from an information security standpoint, this is a terrifying prospect as malicious software can potentially be injected into a system by plugging in a …read more Continue reading Sleuth Untrusted USB Communication with USBValve
Mobile PINs are a lot like passwords in that there are a number of very common ones, and [Mobile Hacker] has a clever proof of concept that uses a tiny …read more Continue reading Brute Forcing a Mobile’s PIN Over USB With a $3 Board