Collaborate Disseminate
The geopolitics surrounding the invasion of Ukraine are outside the scope of this column, but the cybersecurity ramifications are certainly fitting fodder. The challenge here is that almost everything of …read more Continue reading This Week in Security: Ukraine, Nvidia, and Conti
At even vaguely infosec-related conferences, CTFs are a staple. For KernelCon 2021, [Tyler Rosonke] resolved to create a challenge breaking the traditions, entertaining and teaching people in a different way, …read more Continue reading Spaceship Repair CTF Covers Hardware Hacker Essentials
Apple’s AirTags have caused a stir, but for all the wrong reasons. First, they turn all iPhones into Bluetooth LE beacon repeaters, without the owner’s permission. The phones listen for …read more Continue reading You Break It, We Fix It
One of the most popular WordPress backup plugins, UpdraftPlus, has released a set of updates, x.22.3, that contain a potentially important fix for CVE-2022-23303. This vulnerability exposes existing backups to …read more Continue reading This Week in Security: Updraft, Termux, and Magento
People have gotten much savvier about computer security in the last decade or so. Most people know that sending a document with sensitive information in it is a no-no, so …read more Continue reading Pixelating Text Not a Good Idea
You’ve probably heard of the infamous rule 34, but we’d like to propose a new rule — call it rule 35: Anything that can be used for nefarious purposes will …read more Continue reading No Privacy: Cloning the AirTag
Have you ever wanted to be a fly on the wall, watching a penetration tester attack a new machine — working their way through the layers of security, ultimately leveraging …read more Continue reading How a Pentester Gets Root
Running Chrome or a Bhromium-based browser? Check for version 98.0.4758.102, and update if you’re not running that release or better. Quick tip, use chrome://restart to trigger an immediate restart of …read more Continue reading This Week in Security: Chrome 0-day,Cassandra, and a Cisco PoC
Samba has a very serious vulnerability, CVE-2021-44142, that was just patched in new releases 4.13.17, 4.14.12, and 4.15.5. Discovered by researchers at TrendMicro, this unauthenticated RCE bug weighs in at …read more Continue reading This Week in Security: Samba, Wormhole Crypto Heist, And A Bogus CVE
One of the many fascinating fields that’s covered by Hackaday’s remit lies in the world of hardware security, working with physical electronic hardware to reveal inner secrets concealed in its …read more Continue reading Remoticon 2021 // Colin O’Flynn Zaps Chips (And They Talk)