Collaborate Disseminate
At some point, you will find yourself asking – is my device actually running the code I expect it to? [bunnie] aka [Andrew Huang] is passionate about making devices you …read more Continue reading Here’s How The Precursor Protects Your Privacy
Looking to expand their hardware design experience, [mentalburden] recently put together a low-cost handheld gadget that can be used for various security-related tasks such as logging WiFi traffic, operating as …read more Continue reading ESP32 Powers Covert Pentesting Device
Last week we covered the Symbiote Rootkit, based on the excellent work by Blackberry, Intezer, and Cyber Geeks. This particular piece of malware takes some particularly clever and devious steps …read more Continue reading This Week in Security: Symbiote Research and Detection, Routing Hijacks, Bruggling, and More
[Walker] has a very interesting new project: a completely different take on a self-destructing USB drive. Instead of relying on encryption or other “visible” security features, this device looks and …read more Continue reading USB Drive Keeps Your Secrets… As Long As Your Fingers Are Wet?
Meet [Tanner]. [Tanner] is a hacker who also appreciates the security of their home while they’re out of town. After doing some research about home security, they found that it …read more Continue reading CV Based Barking Dog Keeps Home Secure, Doesn’t Need Walking
The golden arches of a McDonald’s restaurant are a ubiquitous feature of life in so many parts of the world, and while their food might not be to all tastes …read more Continue reading McTerminals Give The Hamburglar a Chance
It seems like [Mordechai Guri]’s lab at Ben-Gurion University is the place where air-gapped computers go to die, or at least to give up their secrets. And this hack using …read more Continue reading SATAn Turns Hard Drive Cable into Antenna to Defeat Air-Gapped Security
There’s an ongoing campaign that’s compromising FreePBX systems around the world. It seems to be aimed specifically at Elastix systems, using CVE-2021-45461, a really nasty Remote Code Execution (RCE) from …read more Continue reading This Week in Security: Asterisk, TikTok, Gitlab, And Finally a Spam Solution
[greenluigi1] bought a Hyundai Ioniq car, and then, to our astonishment, absolutely demolished the Linux-based head unit firmware. By that, we mean that he bypassed all of the firmware update …read more Continue reading Hacker Liberates Hyundai Head Unit, Writes Custom Apps
Yet another entry in the “why we can’t have nice things” category, Retbleed was announced this week, as yet another speculative execution vulnerability. This one is mitigated in hardware for …read more Continue reading This Week in Security: Retbleed, Post-Quantum, Python-atomicwrites, and the Mysterious Cuteboi