Collaborate Disseminate
Tesla vehicles have a charging port that is under a cover that only opens on command from a charging station. Well, maybe not only. [IfNotPike] reports that he was able …read more Continue reading Just in Case You Want to Charge Your Neighbor’s Tesla
The Cyclops Blink botnet is thought to be the work of an Advanced Persistent Threat (APT) from Russia, and seems to be limited to Watchguard and Asus devices. The normal …read more Continue reading This Week in Security: Vulnerable Boxes, Government Responses, and New Tools
One of the big stories surrounding the announcement of Windows 11 was that it would require support for TPM 2.0, or Trusted Platform Module, to run. This takes the form …read more Continue reading Build a TPM Module For Your Server
[Editor’s note: There is a second, fake iteration of this column out today. This is obviously the real column.] An alert from CISA, combined with an unsealed pair of indictments, …read more Continue reading This Week in Security: More State-Sponsored Activity, Spring4Shell
[Editor’s note: There is a second, fake iteration of this column out today. This is obviously the real column.] First off, there’s an amazing video tutorial from [Hackerman], embedded below …read more Continue reading This WeeΚ in Security: Hackerman, Twitter’s Best, and Signs to Watch Out For
For every very clever security protocol that keeps people safe, there’s a stupid hack that defeats it in an unexpected way. Take OAuth for instance. It’s the technology that sites …read more Continue reading This Week in Security: Browser in the Browser, Mass Typo-squatting, and /dev/random Upgrades
It’s fair to say that many of us will have at some time inadvertently bricked a device by applying the wrong firmware by mistake. If we’re lucky then firing up …read more Continue reading Welcome To The Future, Where your Microwave Thinks It’s A Steam Oven
It seems I have made my tiny, indelible mark on internet security history, with the term “protestware“. As far as I can tell, I first coined this particular flavor of …read more Continue reading This Week in Security: More Protestware, Another Linux Vuln, and TLStorm
Denial-of-Service (DoS) amplification. Relatively early in the history of the Internet — it was only 14 years old at the time — the first DoS amplification attack was discovered. [TFreak] …read more Continue reading This Week in Security: DDoS Techniques, Dirty Pipe, and Lapsus$ Continued
Early in the morning of February 24th, Dr. Jeffrey Lewis, a professor at California’s Middlebury Institute of International Studies watched Russia’s invasion of Ukraine unfold in realtime with troop movements …read more Continue reading The Invisible Battlefields of the Russia-Ukraine War