Collaborate Disseminate
Up first this week is a quintet of vulnerabilities in the Linux kernel’s wireless code. It started with [Soenke Huster] from TU Darmstadt, who found a buffer overwrite in mac80211 …read more Continue reading This Week in Security: Linux WiFi, Fortinet, Text4Shell, and Predictable GUIDs
If there’s one thing about managing a bunch of keys, whether they’re for RSA, SSH, or a car, it’s that large amounts of them can be a hassle. In fact, …read more Continue reading Front Door Keys Hidden In Plain Sight
First up is some clever wizardry from the [Aqua Nautilus] research team, who discovered a timing attack that leaks information about private npm packages. The setup is this, npm hosts …read more Continue reading This Week in Security: npm Timing Leak, Siemens Universal Key, and PHP in PNG
Google recently made some videos to highlight cybersecurity. The video below is episode three, and it tells an interesting story about the first crash test dummy. However, the really interesting …read more Continue reading Hacking Google with Plasma
If you use PHP, you likely use the Composer tool for managing dependencies, at least indirectly. And the good folks at SonarSource found a nasty, potential supply chain attack in …read more Continue reading This Week in Security: PHP Attack Defused, Scoreboard Manipulation, and Tillitis
According to researchers at GTSC, there’s an unpatched 0-day being used in-the-wild to exploit fully patched Microsoft Exchange servers. When they found one compromised server, they made the report to …read more Continue reading This Week in Security: Exchange 0-day, Doppelgangers, And Python Gets Bit in the TAR
A self-destructing storage device that vaporizes its contents at the first sign of trouble would be an invaluable tool for many people, but good luck getting your hands on such …read more Continue reading So How Do You Make a Self-Destructing Flash Drive?
I got a rude awakening Wednesday morning this week. HaD writers don’t necessarily keep normal hours — don’t judge. A local client called, complaining that Google Maps was blocking on …read more Continue reading This Week in Security: Malwarebytes Goes Nuts, Uber
What do SQL injection attacks have in common with the nuances of GPT-3 prompting? More than one might think, it turns out. Many security exploits hinge on getting user-supplied data …read more Continue reading What’s Old is New Again: GPT-3 Prompt Injection Attack Affects AI
ATM skimmers are electronic devices designed to read financial card information, and they are usually paired with a camera to capture a user’s PIN. These devices always have to hide …read more Continue reading Gaze Upon Just How Thin ATM Skimmers Are Getting