This is the fourth and final post in a 4-part blog series that accompanies ERNW White Paper 80: Token Theft in Microsoft Entra ID - An Analysis of Controls . In Part 1 , we covered how attackers steal tokens, Part 2 looked at Continuous Access Evaluation, and Part 3 tested Token Protection. This post steps back from…
Visit insinuator.net → RSS feedOn Hacker News Feb 2020 – Apr 2020
On November 3rd, 2019, we have reported a critical vulnerability affecting the Android Bluetooth subsystem. This vulnerability has been assigned CVE-2020-0022 and was now patched in the latest security patch from February 2020. The security impact is as follows:
Nowadays, Bluetooth is an integral part of mobile devices. Smartphones interconnect with smartwatches and wireless headphones. By default, most devices are configured to accept Bluetooth connections from any nearby unauthenticated device. Bluetooth packets are processed by the Bluetooth chip (also called a…