3241
Linux Threat Hunting: ‘Syslogk’ a kernel rootkit found in the wild
Syslogk Rootkit Revealed: Analysis
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,441 posts.
3242
Ukrainian Billionaires Allegedly Laundered Money in the US
Ukraine’s largest bank is taking its battle with its former owners to US shores. In a civil lawsuit filed in the state court of Delaware, PrivatBank accuses Ihor Kolomoisky and Gennady Bogolyubov, the billionaires who owned the bank before it was nationalized three years ago, of large-scale money laundering in the…
3243
GnuPG - 16 Years of protecting privacy
In case you are not automatically redirected, please follow this link to https://gnupg.org/blog .
3244
Good Bad ISPs
Defend yourself against tracking and surveillance. Circumvent censorship. | Good Bad ISPs
3245
Details Behind Today's Internet Hacks
At 1:19pm, a researcher noticed that the New York Times' website wasn't loading. We know the New York Times tech team, so we emailed to check in. Minutes later, the CTO of the NYT called us back.
3246
OWASP Data Breach Notification
OWASP Data Leak Notification on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.
3247
ReBreakCaptcha: Breaking Google’s ReCaptcha v2 Using Google
TL;DR A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google’s ReCaptcha v2 anywhere on the web. Overview Back in 2016, I started poking around to see how hard it w…
3248
Breaking SecuROM 7 – A Dissection
This is an archive of an old whitepaper made by three reverse engineering experts on breaking down SecuROM and its multiple layers of protection. Archive Opening NotesAs mentioned, this is a whitepa
3249
Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
Posted by Sergei Glazunov and Mark Brand, Project ZeroIntroductionIt was a normal week in the Pro...
3250
Google Chrome is ditching its XSS detection tool
The Sophos Blog
3251
Indian threat actor Patchwork APT caught in its own web
ThreatDown Patchwork Apt Caught In Its Own Web: threat intelligence on Patchwork APT tactics, targets, and how to detect and stop this threat.
3252
3253
3254
What’s Next in Making Encrypted DNS-over-HTTPS the Default
More than 70,000 users have already chosen on their own to explicitly enable DoH in Firefox Release edition. We are close to releasing DoH in the USA, and we have a few updates to share.
3255
3256
Is Germany on the brink of banning ad blockers?
Across the internet, users rely on browsers and extensions to shape how they experience the web: to protect their privacy, improve accessibility, block harmful or intrusive content, and take control ...
3257
TextSecure's Private Group Messaging
One of the major features we introduced in the TextSecure v2 release was private group chat. We believe that group chat is an important feature for encrypted communications projects, so we wanted to try to summarize some of the existing work in this area, as well as how TextSecure’s group chat pr...
3258
Our Ambitious Plan to Make Insecure PHP Software a Thing of the Past
Let's solve application security at an ecosystem level by updating outdated and/or insecure blog posts to refer developers to better practices.
3259
Briar has been removed from Google Play
Status update Update (February 28, 13:20 UTC): Briar is available on Google Play again. Briar was briefly removed from Google Play because we didn’t provide Google’s review team with a username and password for testing the app. We provided Google with a username and password for testing and the app is now available…
3260
Why your 'A' grade SSL is 'outdated cryptography' on Chrome
Get EV SSL certificates in hours, not days. Prechecks before you pay. We do the hard work for you.
3261
Pasco County’s Sheriff Must End Its Targeted Child Harassment Program
In September 2020, the Tampa Bay Times revealed a destructive “data-driven” policing program run by the Pasco County, Florida Sheriff's Office. The program is misleadingly called “Intelligence-Led Policing” (ILP), but in reality, it's nothing more than targeted child harassment by police. Young...
3262
Dozens of high-traffic websites vulnerable to ‘account pre-hijacking’, study
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
3263
3264
3265
An Android 8.0-9.0 Bluetooth Zero-Click RCE
Nowadays, Bluetooth is an integral part of mobile devices. Smartphones interconnect with smartwatches and wireless headphones. By default, most devices are configured to accept Bluetooth connections from any nearby unauthenticated device. Bluetooth packets are processed by the Bluetooth chip (also called a…
3266
3267
Bad Binder: Android In-the-Wild Exploit
Posted by Maddie Stone, Project ZeroIntroductionOn October 3, 2019, we disclosed issue 1942 (CVE-...
3268
3269
‘We Got to Be Cool About This‘: An Oral History of the LØpht, Part 1
Independent security journalism: news and analysis on intrusions, vulnerabilities, AI, policy and the software supply chain, plus video and podcasts.
3270