Collaborate Disseminate
Technology enables all kinds of possibilities to mold our environments in the way we best see fit. Plenty of ski resorts use snowmaking to extend their seasons, there are wave …read more Continue reading 3D Printed Climbing Holds, Now With Texture
Lacework announced the acquisition of Soluble, a scalable cloud infrastructure management company. The Infrastructure as Code (IaC) remediation capabilities Soluble provides, in addition to several new updates to the Lacework platform announced, combin… Continue reading Lacework acquires Soluble to strengthen its data-driven cloud security platform
Cybercriminals were able to register malicious generic top-level domains (gTLDs) and subdomains imitating legitimate, prominent sites due to Verisign and several IaaS services allowing the use of specific characters that look very much like Latin lette… Continue reading Vulnerability allows attackers to register malicious lookalikes of legitimate web domains
Verisign has fixed an issue that could have allowed attackers to register bogus domains by using homoglyphs in place of more common characters, due to research from California-based security firm Soluble. Matt Hamilton, principal security researcher at Soluble, discovered the flaw when he attempted to register an Amazon Web Services S3 bucket with Unicode emoji characters. “It was possible to register Latin homoglyph characters, specifically Unicode Latin IPA Extension homoglyphs,” he wrote in a blog released Wednesday. “I then checked if it was possible to register domains with these homoglyph characters. Ruh-roh, it was.” Hamilton called out the abuse of the following characters: The “ɡ” (Voiced Velar Stop) The “ɑ” (Latin Alpha) The “ɩ” (Latin Iota) For years, domain providers have been aware of homoglyph attacks and have put in place restrictions to prevent their exploitation, such as barring the use of both Latin and Cyrillic characters at once. Verisign, which operates […]
The post Verisign, Amazon patch zero-day vulnerability that utilized homoglyph characters appeared first on CyberScoop.
Continue reading Verisign, Amazon patch zero-day vulnerability that utilized homoglyph characters
Three cybersecurity startups have been selected to participate in the RSAC Launch Pad 2020. The event gives early stage startups a platform to introduce their potentially groundbreaking solutions to high-profile venture capitalists in a Shark Tank-styl… Continue reading RSAC Launch Pad 2020 participants revealed