Collaborate Disseminate
Full disk encryption is the go-to solution for hardening a laptop against the worst-case scenario of physical access. One way that encryption can be managed is through a Trusted Platform …read more Continue reading This Week in Security: TPM and BootGuard, Drones, and Coverups
There’s a problem with Opera. No, not that kind of opera. The Oracle kind. Oracle OPERA is a Property Management Solution (PMS) that is in use in a bunch of …read more Continue reading This Week in Security: Oracle Opera, Passkeys, and AirTag RFC
An age-old vulnerability of physical keypads is visibly worn keys. For example, a number pad with digits clearly worn from repeated use provides an attacker with a clear starting point. …read more Continue reading Thermal Camera Plus Machine Learning Reads Passwords Off Keyboard Keys
Last week we briefly mentioned a vulnerability in the Papercut software, and more details and a proof of concept have been published. The vulnerability is one known as session puzzling. …read more Continue reading This Week in Security: Session Puzzling, Session Keys, and Speculation
Microsoft’s Threat Intelligence group has announced a new naming scheme for threat actors. It sounds great, naming groups after weather phenomenon, based on the groups motivations or nation of origin. …read more Continue reading This Week in Security: Spandex Tempest, Supply Chain Chain, and NTP
Knitwear can protect you from a winter chill, but what if it could keep you safe from the prying eyes of Big Brother as well? [Ottilia Westerlund] decided to put …read more Continue reading Circumvent Facial Recognition with Yarn
Arthur C. Clarke said that “Any sufficiently advanced technology is indistinguishable from magic”. He was a sci-fi writer, though, and not a security guy. Maybe it should read “Any sufficiently …read more Continue reading Sufficiently Advanced Tech: Has Bugs
You may not be familiar with the Microsoft Message Queuing (MSMQ) service, a store and forward sort of inter-process and inter-system communication service. MSMQ has become something of a legacy …read more Continue reading This Week in Security: QueueJumper, JS VM2 Escape, and CAN Hacking
Despite some companies making strides with ARM, for the most part, the desktop and laptop space is still dominated by x86 machines. For all their advantages, they have a glaring …read more Continue reading Disabling Intel’s Backdoors On Modern Laptops
“Operation Cookie Monster” ranks as one of the best code names in recent memory. And it’s apropo, given what exactly went down. Genesis Market was one of those marketplaces where …read more Continue reading This Week in Security: Cookie Monster, CyberGhost, NEXX, and Dead Angles