Collaborate Disseminate
Did you know just how easily you can glitch microcontrollers? It’s so easy, you really have no excuse for not having tried it out yet. Look, [lord feistel] is doing …read more Continue reading Glitching An ATMega328P Has Never Been Simpler
This week saw an impressive pair of takedowns pulled off by law enforcement agencies around the world. The first was the 911 S5 botnet, Which the FBI is calling “likely …read more Continue reading This Week in Security: Operation Endgame, Appliance Carnage, and Router Genocide
There was something of a mystery this week, with the c.root-servers.net root DNS server falling out of sync with it’s 12 siblings. That’s odd in itself, as these are the …read more Continue reading This Week in Security: Drama at the C-Level, Escape Injection, and Audits
This week Jonathan Bennett and Dan Lynch talk with François Proulx about Poutine, the Open Source security scanner for build pipeline vulnerabilities. This class of vulnerability isn’t as well known …read more Continue reading FLOSS Weekly Episode 784: I’ll Buy You A Poutine
Researchers at Eset have published a huge report on the Ebury malware/botnet (pdf), and one of the high profile targets of this campaign was part of the kernel.org infrastructure. So …read more Continue reading This Week in Security: The Time Kernel.org Was Backdoored and Other Stories
There’s a clever “new” attack against VPNs, called TunnelVision, done by researchers at Leviathan Security. To explain why we put “new” in quotation marks, I’ll just share my note-to-self on …read more Continue reading This Week in Security: TunnelVision, Scarecrows, and Poutine
The UK has the answer to all our IoT problems: banning bad default passwords. Additionally, the new UK law requires device makers to provide contact info for vulnerability disclosures, as …read more Continue reading This Week in Security: Default Passwords, Lock Slapping, and Mastodown
There’s a trend recently, of big-name security appliances getting used in state-sponsored attacks. It looks like Cisco is the latest victim, based on a report by their own Talos Intelligence. …read more Continue reading This Week in Security: Cisco, Mitel, and AI False Flags
The average Hackaday reader hardly needs to be reminded of the incredible potential of the modern microcontroller. While the Arduino was certainly transformative when it hit the scene, those early …read more Continue reading Supercon 2023: Alex Lynd Explores MCUs in Infosec
It may be time to rotate some keys. The venerable PuTTY was updated to 0.81 this week, and the major fix was a change to how ecdsa-sha2-nistp521 signatures are generated. …read more Continue reading This Week in Security: Putty Keys, Libarchive, and Palo Alto