2491
Fake femme fatale dupes IT guys at US government agency
The Sophos Blog
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,441 posts.
2492
2493
Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs
Posted by Mateusz Jurczyk of Google Project ZeroPatch diffing is a common technique of comparing ...
2494
Introducing 'Trusted Publishers'
Announcing a new, more secure way to publish to PyPI
2495
Bypassing Google’s Two-Factor Authentication
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
2496
How I was able to track the location of any Tinder user
By Max Veytsman At IncludeSec we specialize in application security assessment for our clients, that means taking applications apart and finding really crazy vulnerabilities before other hackers do. When we have time off from client work we like to analyze popular apps to see what we find. Towards the end of 2013 we…
2497
An Ancient Kernel Hole Is Not Closed
The "stack clash" series of vulnerabilities were a prime opportunity to demonstrate the strength of grsecurity's approach to security. Unlike upstream Linux and other OSes, the issues uncovered were unexploitable under grsecurity for many years.
2498
2499
How deceptive design is used to compromise your privacy and how to fight back
Today, we’re releasing a new guide explaining how to compel companies employing deceptive design to dodge data protection requests—like those for data deletion or access—to comply. It encapsulates five years...
2500
MikroTik authentication revealed
A deep-dive into MikroTik's hand-rolled Elliptic Curve Secure Remote Protocol (EC-SRP) cryptography used in client-server authentication
2501
The USA Freedom Act: What's to Come and What You Need to Know
Update, Nov 18: The USA Freedom Act does not renew the entirety of the Patriot Act, which consisted of over 100 sections changing numerous electronic surveillance laws. The USA Freedom Act does extend three provisions of the Patriot Act: the "lone wolf" provision, the "roving wire tap" provision,...
2502
Why it’s harder to forge a SHA-1 certificate than to find a SHA-1 collision
It’s well known that SHA-1 is no longer considered a secure cryptographic hash function. Researchers now believe that finding a hash collision (two values that result in the same value when SHA-1 is applied) is inevitable and likely to happen.
2503
2504
An Update on SolarWinds
We’d like to provide a further update to our customers in regards to the SolarWinds breach. At this point we reiterate the message we posted yesterday – we have not played any role in this breach, nor are we aware of any vulnerabilities in TeamCity that may have led to this breach, as we are also not aware of any…
2505
Call of Duty Adds Kernel Level Driver for Anti-Cheat
RICOCHET Anti-Cheat fights unfair play across Warzone™ and Vanguard; new kernel-level driver coming first to Call of Duty: Warzone
2506
GitHub Copilot isn't worth the risk
Copilot may be a glimpse into the future of AI, but it comes with a lot of legal and security baggage.
2507
Teenager facing terrorism charges for something he posted on Facebook
Meet Cameron D'Ambrosio. He's 18 and lives in a small town near Boston. He posts a lot of lyrics on Facebook and wants to be a rapper. Oh, and he's being held without bail as a terrorist for ... WHAT??!
2508
2509
How We Proved the Eth2 Deposit Contract Is Free of Runtime Errors
Consensys is a blockchain software company building the tools, infrastructure and research that power the new Era of Decentralized Finance, for a more secure and open economy
2510
Auth.js is now part of Better Auth
Auth.js, formerly known as NextAuth.js, is now being maintained and overseen by Better Auth team
2511
2512
2513
Cisco's Talos team analysis of WannaCry worm
By Martin Lee, Warren Mercer, Paul Rascagneres, and Craig Williams. Executive Summary A major ransomware attack has affected many organizations across the world reportedly including Telefonica in Spain, the National Health Service in the UK, and FedEx in the US. The malware responsible for this attack is a ransomware…
2514
Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More
The RETADUP worm that affected Israeli hospitals turned out have bigger impact than we first thought. It was accompanied by an even more dangerous threat: an Android malware that can take over the device. We’ve named this Android backdoor GhostCtrl.
2515
Fuzzing between the lines in popular barcode software
Fuzzing—one of the most successful techniques for finding security bugs, consistently featured in articles and industry conferences—has become so popular that you may think most important software has already been extensively fuzzed. But that’s not always the case. In this blog post, we show how we fuzzed the ZBar…
2516
GitHub Actions update: Helping maintainers combat bad actors
The trustworthiness of our platform is crucial, and our team is committed to developer productivity and Actions performing the way we intended.
2517
Microsoft Shuts off HTTPS in Hotmail for Over a Dozen Countries
UPDATE (3/26/11): HTTPS is again available for those in the countries discussed below. Microsoft denies deliberately blocking access to HTTPS, blaming the problem on a bug: We are aware of an issue that impacted some Hotmail users trying to enable HTTPS. That issue has now been resolved. Account...
2518
2519
Over the Air: Exploiting Broadcom’s Wi-Fi Stack (Part 2)
Posted by Gal Beniamini, Project ZeroIn this blog post we'll continue our journey into gaining re...
2520