Collaborate Disseminate
[Editor’s note: There is a second, fake iteration of this column out today. This is obviously the real column.] An alert from CISA, combined with an unsealed pair of indictments, …read more Continue reading This Week in Security: More State-Sponsored Activity, Spring4Shell
[Editor’s note: There is a second, fake iteration of this column out today. This is obviously the real column.] First off, there’s an amazing video tutorial from [Hackerman], embedded below …read more Continue reading This WeeΚ in Security: Hackerman, Twitter’s Best, and Signs to Watch Out For
For every very clever security protocol that keeps people safe, there’s a stupid hack that defeats it in an unexpected way. Take OAuth for instance. It’s the technology that sites …read more Continue reading This Week in Security: Browser in the Browser, Mass Typo-squatting, and /dev/random Upgrades
It’s fair to say that many of us will have at some time inadvertently bricked a device by applying the wrong firmware by mistake. If we’re lucky then firing up …read more Continue reading Welcome To The Future, Where your Microwave Thinks It’s A Steam Oven
It seems I have made my tiny, indelible mark on internet security history, with the term “protestware“. As far as I can tell, I first coined this particular flavor of …read more Continue reading This Week in Security: More Protestware, Another Linux Vuln, and TLStorm
Denial-of-Service (DoS) amplification. Relatively early in the history of the Internet — it was only 14 years old at the time — the first DoS amplification attack was discovered. [TFreak] …read more Continue reading This Week in Security: DDoS Techniques, Dirty Pipe, and Lapsus$ Continued
Early in the morning of February 24th, Dr. Jeffrey Lewis, a professor at California’s Middlebury Institute of International Studies watched Russia’s invasion of Ukraine unfold in realtime with troop movements …read more Continue reading The Invisible Battlefields of the Russia-Ukraine War
The geopolitics surrounding the invasion of Ukraine are outside the scope of this column, but the cybersecurity ramifications are certainly fitting fodder. The challenge here is that almost everything of …read more Continue reading This Week in Security: Ukraine, Nvidia, and Conti
At even vaguely infosec-related conferences, CTFs are a staple. For KernelCon 2021, [Tyler Rosonke] resolved to create a challenge breaking the traditions, entertaining and teaching people in a different way, …read more Continue reading Spaceship Repair CTF Covers Hardware Hacker Essentials
Apple’s AirTags have caused a stir, but for all the wrong reasons. First, they turn all iPhones into Bluetooth LE beacon repeaters, without the owner’s permission. The phones listen for …read more Continue reading You Break It, We Fix It