Collaborate Disseminate
Getting a job has always been a tedious and annoying process, as for all the care that has been put into a CV or resume, it can be still headed …read more Continue reading Get That Dream Job, With a Bit of Text Injection
The world may not be ready, but the .zip Top Level Domain (TLD) is here. It’s a part of the generic TLD category, which was expanded to allow applications for …read more Continue reading This Week in Security: .zip Domains, Zip scanning
Everyone in security will tell you need two-factor authentication (2FA), and we agree. End of article? Nope. The devil, as always with security, is in the details. Case in point: …read more Continue reading Two Factor Authentication Apps: Mistakes to Malware
Full disk encryption is the go-to solution for hardening a laptop against the worst-case scenario of physical access. One way that encryption can be managed is through a Trusted Platform …read more Continue reading This Week in Security: TPM and BootGuard, Drones, and Coverups
There’s a problem with Opera. No, not that kind of opera. The Oracle kind. Oracle OPERA is a Property Management Solution (PMS) that is in use in a bunch of …read more Continue reading This Week in Security: Oracle Opera, Passkeys, and AirTag RFC
An age-old vulnerability of physical keypads is visibly worn keys. For example, a number pad with digits clearly worn from repeated use provides an attacker with a clear starting point. …read more Continue reading Thermal Camera Plus Machine Learning Reads Passwords Off Keyboard Keys
Last week we briefly mentioned a vulnerability in the Papercut software, and more details and a proof of concept have been published. The vulnerability is one known as session puzzling. …read more Continue reading This Week in Security: Session Puzzling, Session Keys, and Speculation
Microsoft’s Threat Intelligence group has announced a new naming scheme for threat actors. It sounds great, naming groups after weather phenomenon, based on the groups motivations or nation of origin. …read more Continue reading This Week in Security: Spandex Tempest, Supply Chain Chain, and NTP
Knitwear can protect you from a winter chill, but what if it could keep you safe from the prying eyes of Big Brother as well? [Ottilia Westerlund] decided to put …read more Continue reading Circumvent Facial Recognition with Yarn
Arthur C. Clarke said that “Any sufficiently advanced technology is indistinguishable from magic”. He was a sci-fi writer, though, and not a security guy. Maybe it should read “Any sufficiently …read more Continue reading Sufficiently Advanced Tech: Has Bugs