3451
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,441 posts.
3452
ProtonMail is dropping support for Internet Explorer 11
If you still use Internet Explorer, you will need to switch to a more secure, modern web browser to access Proton Mail.
3453
Windows 10 RCE: The exploit is in the link
Chaining a misconfiguration in IE11/Edge Legacy with an argument injection in a Windows 10/11 default URI handler and a bypass for a previous Electron patch, we developed a drive-by RCE exploit for Windows 10. The main vulnerability in the ms-officecmd URI handler has not been patched yet and can also be triggered…
3454
Finding MongoDB instances without any authentication
I would like to take a moment to discuss databases. Most people use Shodan to find devices that have web servers, but for a few years now I've also been crawling the Internet for various database software. I usually mention this during my talks and I've tried to raise awareness
3455
3456
3457
Security and privacy risks of public JavaScript CDNs
Once upon a time, loading common scripts & styles from a public CDN like cdnjs or Google's Hosted Libraries was a 'best practice' - a great way to instantly...
3458
Blueborne – A new attack vector endangering major operating systems
Following the disclosure of the BlueBorne attack vector this past September, Armis discovered that critical Bluetooth vulnerabilities impact the Amazon Echo and Google Home.
3459
Attunity Data Leak: Vendor for half the Fortune 100 exposed terabyte of backups
Backups ensure data continuity, but they're also a surface of risk. See how Fortune 100 vendor Attunity exposed nearly a terabyte of internal backups.
3460
Social engineering dos and don'ts
Another day, another success at sneaking into a building and pretending to be staff. I do so love drinking other people’s expensive office coffee. No fruit bowls though. Close, but no banana. It got me thinking, again, about what makes for good social engineering (SE), and what advice would I give my younger self…
3461
Fuzzing Like It’s 1989
With 2019 a day away, let’s reflect on the past to see how we can improve. Yes, let’s take a long look back 30 years and reflect on the original fuzzing paper, An Empirical Study of the Reliability of UNIX Utilities, and its 1995 follow-up, Fuzz Revisited, by Barton P. Miller. In this blog post, […]
3462
Testing Firefox Monitor, a New Security Tool
From shopping to social media, the average online user will have hundreds of accounts requiring passwords. At the same time, the number of user data breaches occurring each year continues ...
3463
Intel deprecates SGX on Core series processors
A newer version of this document is available. Customers should click here to go to the newest version.
3464
Updated Proton, Unified Protection
ProtonMail is now Proton! We’re more than just encrypted email — we now offer an entire privacy-focused ecosystem of services.
3465
3466
Getting a biometric security key right
"Discover the upcoming YubiKey Bio with biometric capabilities. Enhance your security with our cutting-edge, FIDO-enabled device. Sign up for updates!
3467
The mechanics of a sophisticated phishing scam and how we stopped it
Yesterday, August 8, 2022, Twilio shared that they’d been compromised by a targeted phishing attack. Around the same time as Twilio was attacked, we saw an attack with very similar characteristics also targeting Cloudflare’s employees
3468
Why Xen Wasn't Hit by RETBleed on Intel CPUs
An article explaining why Xen wasn't affected by the recent RETBleed security issue on Intel CPUs.
3469
3470
A Year in Review of 0-days Exploited In-the-Wild in 2022
Maddie Stone, Security Researcher, Threat Analysis Group (TAG) This is Google’s fourth annual year-in-review of 0-days exploited in-the-wild...
3471
3472
Mintlify GitHub read/write token leak
Edit March 18, 2024 10:20 AM
3473
Decoding the 90s: Cryptography in Early Software Development (2023)
In August 2020 we were commissioned to recover a cache of locked QText documents from the mid-90s. This is the process of analyzing the encrypted documents and reverse engineering a DOS-era Hebrew-English word processor written in Turbo Pascal.
3474
3475
Deciphering the Messages of Apple’s T2 Coprocessor
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
3476
AirBorne: Wormable zero-click remote code execution (RCE) in AirPlay protocol
Oligo Security reveals AirBorne, a new set of vulnerabilities in Apple’s AirPlay protocol and SDK. Learn how zero-click RCEs, ACL bypasses, and wormable exploits could endanger Apple and IoT devices worldwide — and how to protect yourself.
3477
Negative Result: Reading Kernel Memory from User Mode
I were going to write an introduction about how important negative results can be. I didn’t. I assume you can figure out for yourself why that is and if not you got all the more reason to read this blog post. If you think it’s trivial why my result is negative, you definitely need to read the blog post.
3478
Vivaldi: Violating CoC on forum may close your email account
We’re building a Community that is happy, kind, and constructive. Read our Code of Conduct for and find out how you can help us get there.
3479
Improving first impressions on Signal
The phenomenon of unsolicited and unwanted messaging dates back to the earliest communication platforms: from prehistoric cave graffiti and postal chain letters to popup ads and robocalls. To prevent spam, most online services rely on large-scale inspection of plaintext conversation content or de...
3480
Updated Firefox Security Indicators
Cross posting this. It was written a couple months ago and posted to Mozilla’s Security Blog This article was coauthored by Aislinn Grigas, Senior Interaction Designer, Firefox Desktop November 3, 2015 Over the past few months, Mozilla has been improving the user experience of our privacy and security features in…