Category Archives: TSA

SQL Injection Attack on Airport Security

Posted on by

Interesting vulnerability:

…a special lane at airport security called Known Crewmember (KCM). KCM is a TSA program that allows pilots and flight attendants to bypass security screening, even when flying on domestic personal trips.

The KCM process is fairly simple: the employee uses the dedicated lane and presents their KCM barcode or provides the TSA agent their employee number and airline. Various forms of ID need to be presented while the TSA agent’s laptop verifies the employment status with the airline. If successful, the employee can access the sterile area without any screening at all…

Continue reading SQL Injection Attack on Airport Security→

Are you tracking your cybersecurity implementation?

Posted on by

From May 7 to 12, 2021, the massive Colonial Pipeline refined oil product delivery system ground to a halt. It was the victim of a DarkSide ransomware cyberattack. The Colonial Pipeline delivers about 45% of fuel for the East Coast, including gasoline, diesel fuel, heating oil, jet fuel and fuel used by the military. When […]

The post Are you tracking your cybersecurity implementation? appeared first on Security Intelligence.

Continue reading Are you tracking your cybersecurity implementation?→

No-Fly List Exposed

Posted on by

I can’t remember the last time I thought about the US no-fly list: the list of people so dangerous they should never be allowed to fly on an airplane, yet so innocent that we can’t arrest them. Back when I thought about it a lot, I realized that the TSA’s practice of giving it to every airline meant that it was not well protected, and it certainly ended up in the hands of every major government that wanted it.

The list is back in the news today, having been left exposed on an insecure airline computer. (The airline is CommuteAir, a company so obscure that I’ve never heard of it before.)…

Continue reading No-Fly List Exposed→

TSA Admits Liquid Ban Is Security Theater

Posted on by

The TSA is allowing people to bring larger bottles of hand sanitizer with them on airplanes: Passengers will now be allowed to travel with containers of liquid hand sanitizer up to 12 ounces. However, the agency cautioned that the shift could mean slightly longer waits at checkpoint because the containers may have to be screened separately when going through security…. Continue reading TSA Admits Liquid Ban Is Security Theater→

Homeland Security sued over secretive use of face recognition

Posted on by

As of June 2019, CBP had processed more than 20 million travelers using facial recognition, civil rights group ACLU says. Continue reading Homeland Security sued over secretive use of face recognition→

Sen. Schumer Pushes for TSA Employee Ban on TikTok App at Work

Posted on by

The Department of Homeland Security and two U.S. military branches already had discontinued use of the app based on concerns over Chinese data-security and censorship practices. Continue reading Sen. Schumer Pushes for TSA Employee Ban on TikTok App at Work→

Microsoft OneDrive Personal Vault, Google’s New Privacy and Security Controls, REAL ID Deadline

Posted on by

You’re listening to the Shared Security Podcast, exploring the trust you put in people, apps, and technology…with your host, Tom Eston. In episode 89 for October 7th 2019: Microsoft’s new OneDrive personal vault, updated privacy and s… Continue reading Microsoft OneDrive Personal Vault, Google’s New Privacy and Security Controls, REAL ID Deadline→