91
Vectorized Emulation: fuzzing at 2 trillion instructions per second
This is the introduction of a multipart series. It is to give a high level overview without really deeply diving into any individual component.
New
The latest blog posts to take off on Hacker News. 556 posts.
92
Modernizing Transport Security
Posted by David Benjamin, Chrome networking *Updated on October 17, 2018 with details about changes in other browsers TLS (Transport Lay...
93
Google and Android have your back by protecting your backups
Posted by Troy Kensinger, Technical Program Manager, Android Security and Privacy Android is all about choice. As such, Android strives to...
94
How I hacked hundreds of companies through their helpdesk (2017)
UPDATE: The Next Web wrote a story about my findings…
95
96
97
An Update on the Security Issue
We're sharing new details about the recent security issue.
98
99
An overview of the top web hacking techniques of 2017
The verdict is in! Following 37 nominations whittled down to a shortlist of 15 by a community vote, our panel of experts has conferred and selected the top 10 web hacking techniques of 2017 (and 2016)
100
Delaying Further Symantec TLS Certificate Distrust
Due to a long list of documented issues, Mozilla previously announced our intent to distrust TLS certificates issued by the Symantec Certification Authority, which is now a part of DigiCert. ...
101
Cloudflare Browser Check
Secure DNS Transport using DoH (DNS over HTTPS) or DoT (DNS over TLS) and SNI with ECH
102
103
104
Supply Chain Security Is the Whole Enchilada, but Who’s Willing to Pay for It?
From time to time, there emerge cybersecurity stories of such potential impact that they have the effect of making all other security concerns seem minuscule and trifling by comparison. Yesterday was one of those times. Bloomberg Businessweek on Thursday published a bombshell investigation alleging that Chinese cyber…
105
106
107
Someone used my IPFS gateway for phishing
At 02:43 this morning, I received an abuse complaint email. It was sent by PhishLabs to DigitalOcean, and DigitalOcean forwarded it to me.
108
First-ever DNSSEC root key rollover
DNSSEC is a system of digital signatures that prevent DNS spoofing. Using DNSSEC, it does not matter where your DNS answers came from, since the DNS resolver or application can verify the DNSSEC signatures to ensure the DNS data is not tampered with..DNS is hierarchical, which means that the parent zone vouches for…
109
GoogleMeetRoulette: Joining random meetings
Finding Google Meet phone numbers and bruteforcing PINs to join random meetings
110
Bloomberg’s ‘The Big Hack’
One way or the other, there is more to come on this story, and either Bloomberg’s or Apple’s and Amazon’s credibility is going to take a significant hit.
111
112
113
Trustworthy Chrome Extensions, by default
Incredibly, it’s been nearly a decade since we launched the Chrome extensions system. Thanks to the hard work and innovation of our deve...
114
Voice Phishing Scams Are Getting More Clever
Most of us have been trained to be wary of clicking on links and attachments that arrive in emails unexpected, but it’s easy to forget scam artists are constantly dreaming up innovations that put a new shine on old-fashioned telephone-based phishing scams. Think you’re too smart to fall for one? Think again: Even…
115
116
How companies use fake sites, backdated articles to censor Google results (2017)
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.
117
A cache invalidation bug in Linux memory management
Posted by Jann Horn, Google Project ZeroThis blogpost describes a way to exploit a Linux kernel b...
118
UK intelligence agency admits unlawfully spying on Privacy International
Thames House, Offices of MI5. Photo Credit: Wikimedia Commons
119
120
LoJax: First UEFI rootkit found in the wild, courtesy of the Sednit group
ESET researchers have discovered the first in-the-wild UEFI rootkit. Dubbed LoJax, the research team has shown that the Sednit operators used different components of the LoJax malware to target a few government organizations in the Balkans as well as in Central and Eastern Europe.