Collaborate Disseminate
It may be time to rotate some keys. The venerable PuTTY was updated to 0.81 this week, and the major fix was a change to how ecdsa-sha2-nistp521 signatures are generated. …read more Continue reading This Week in Security: Putty Keys, Libarchive, and Palo Alto
So first up, we have BatBadBut, a pun based on the vulnerability being “about batch files and bad, but not the worst.” It’s a weird interaction between how Windows uses …read more Continue reading This Week in Security: BatBadBut, DLink, and Your TV Too
The xz backdoor is naturally still the top story of the week. If you need a refresher, see our previous coverage. As expected, some very talented reverse engineers have gone …read more Continue reading This Week in Security: XZ, ATT, and Letters of Marque
The Linux command wall is a hold-over from the way Unix machines used to be used. It’s an abbreviation of Write to ALL, and it was first included in AT&T …read more Continue reading This Week in Security: Peering Through the Wall, Apple’s GoFetch, and SHA-256
Here’s a fun thought experiment. UDP packets can be sent with an arbitrary source IP and port, so you can send a packet to one server, and could aim the …read more Continue reading This Week in Security: Loop DOS, Flipper Responds, and More!
OK, that headline is a bit of a cheap shot. But if you run the curl binary that Apple ships, you’re in for a surprise if you happen to use …read more Continue reading This Week in Security: Apple Backdoors Curl, Tor’s New Bridge, and GhostRace
The temptation to “take the money and run” was apparently too much for the leadership of the AlphV ransomware crime ring. You may have heard of this group as being …read more Continue reading This Week in Security: Blame the Feds, Emergency Patches, and the DMA
Github is struggling to keep up with a malware campaign that’s a new twist on typosquatting. The play is straightforward: Clone popular repositories, add malware, and advertise the forks as …read more Continue reading This Week in Security: Forksquatting, RustDesk, and M&Ms
Reading through a vulnerability report about ClamAV, I came across a phrase that filled me with dread: “The file name is not sanitized”. It’s a feature, VirusEvent, that can be …read more Continue reading This Week in Security: Filename Not Sanitized, MonikerLink, and Snap Attack!
Linux has a shim problem. Which naturally leads to a reasonable question: What’s a shim, and why do we need it? The answer: Making Linux work wit Secure Boot, and …read more Continue reading This Week in Security: Broken Shims, LassPass, and Toothbrushes?