Collaborate Disseminate
“Under-door” style attacks are when an attacker slides a tool through the gap underneath a door, hooks the interior handle from below, and opens the door by pulling the handle …read more Continue reading 3D Printed Protection Against “Under-Door” Attacks
Military officials and civilian security researchers have been warning us for years: cyberattacks are becoming a very real part of modern warfare. Far from being limited to military targets, cyberattacks …read more Continue reading The Great Euro Sat Hack Should Be a Warning to Us All
For most Hackaday readers the process of buying groceries this weekend has been a relatively painless one, however we’re guessing some of our German friends will have found their cards …read more Continue reading Expired Certificate Causes German Payment Meltdown
If there’s something weird in your Network Neighborhood, who you gonna call? If you want your WiFi troubles diagnosed in style, try calling [Travis Kaun] — he might just show …read more Continue reading Track Down Ghosts in Your WiFi With the Pwnton Pack
There’s a danger in security research that we’ve discussed a few times before. If you discover a security vulnerability on a production system, and there’s no bug bounty, you’ve likely …read more Continue reading This Week in Security: Good Faith, Easy Forgery, and I18N
[Samuel]’s first foray into making DIY hardware authentication tokens was a great success, but he soon realized that a device intended for everyday carry and use has a few different …read more Continue reading TurtleAuth DIY Security Token Gets (Re)designed for Durable, Everyday Use
As conspiracy theories go, one of the more plausible is that a cell phone could be running malicious firmware on its baseband processor, and be listening and transmitting data even …read more Continue reading This Week in Security: iPhone Unpowered, Python Unsandboxed, and Wizard Spider Unmasked
F5’s BIG-IP platform has a Remote Code Execution (RCE) vulnerability: CVE-2022-1388. This one is interesting, because a Proof of Concept (PoC) was quickly reverse engineered from the patch and released …read more Continue reading This Week in Security: F5 Twitter PoC, Certifried, and Cloudflare Pages Pwned
DNS spoofing/poisoning is the attack discovered by [Dan Kaminski] back in 2008 that simply refuses to go away. This week a vulnerability was announced in the uClibc and uClibc-ng standard …read more Continue reading This Week in Security: uClibc and DNS Poisoning, Encryption is Hard, and the Goat
Despite their claims of innocence, we all know that the big tech firms are listening to us. How else to explain the sudden appearance of ads related to something we’ve …read more Continue reading Audio Eavesdropping Exploit Might Make That Clicky Keyboard Less Cool