4591
Dutch Data Protection Authority: Microsoft breaches law with Windows 10
Met deze test controleren we of u een mens bent. Hiermee voorkomen we ongeoorloofd gebruik van deze dienst.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
4592
Crooks Bypassed Google's Email Verification to Create Workspace Accounts, Acces
Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder at third-party services that allow logins through Google’s “Sign in with Google” feature.
4593
Sinking container ships by hacking load plan software
In my previous article, we looked at the easiest route on to a ships network – the satcoms system. Even having compromised that, it could be a challenge to affect the ship’s navigation, propulsion and control systems – most of these networks are at least somewhat segregated from one another. That got me thinking about…
4594
How I created two images with the same MD5 hash
I posted the following images the other day which although looking totally different have exactly the same MD5 hash ( e06723d4961a0a3f950e...
4595
Dell patches 12-year-old driver vulnerability impacting millions of PCs
Update your Dell devices now! SentinelLabs discover five high severity flaws in Dell firmware update driver impacting desktops, laptops, notebooks & more.
4596
Three Charged in Fatal Kansas ‘Swatting’ Attack
Federal prosecutors have charged three men with carrying out a deadly hoax known as “swatting,” in which perpetrators call or message a target’s local 911 operators claiming a fake hostage situation or a bomb threat in progress at the target’s address — with the expectation that local police may respond to the scene…
4597
Yep, Passkeys Still Have Problems
Firstyear's blog
4598
The Rise of One-Time Password Interception Bots
In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. That service quickly went offline, but new research reveals a number of competitors have since…
4599
Rolling Your Own Crypto
So you want to roll your own crypto. Well, be careful. Be very careful.
4600
Cloudflare is free of CAPTCHAs; Turnstile is free for everyone
Now that we’ve eliminated CAPTCHAs at Cloudflare, we want to hasten the demise of CAPTCHAs across the internet. We’re thrilled to announce that Turnstile is generally available, and Turnstile’s ‘Managed’ mode is now completely free to everyone for unlimited use.
4601
Software Freedom Doesn't Kill People, Security Through Obscurity Kills People
The time has come that I must speak out against the inappropriate rhetoric used by those who (ostensibly) advocate for FLOSS usage in automotive applications.
4602
Some thoughts about Anthropic's new cryptanalysis results
Yesterday Anthropic published two new cryptanalysis results, both outputs of Claude Mythos, their (still) unreleased advanced model. The first of these results attacks a signature scheme called HAW…
4603
4604
VPN users unmasked by zero-day vulnerability in Virgin Media routers
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
4605
Quad9 public DNS moves to Switzerland
A public and free DNS service for a better security and privacy
4606
Kids, this is story of How I Met... my VPS hacked
Just recently I published my technical goals for 2014 and one of them was to learn more about security. Well it couldn’t have been more appropriate, my Virtual Private Server (VPS) just got hacked, for the second time (I use the VPS to host a Java web application). The first time, I basically rebuilt my server and…
4607
Detecting Monero Miners with Bpftrace
Pixie Blog
4608
Disqus comments adding third-party ad-tracking
I'm killing Disqus comments on my blog. Here's why.
4609
CNET Injecting Malware into Downloads
Download.com has been caught inserting malware/adware into the 3rd party software it distributes
4610
4611
4612
PHP2Shell: Exploitation attempts and remediation trends
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
4613
The XAES-256-GCM extended-nonce AEAD
XAES-256-GCM is a new AEAD extended-nonce algorithm designed for high-level APIs and FIPS 140 compliance.
4614
Why Samsung Knox Isn't Really a Fort Knox
UPDATE #2: Apparently Samsung said in their press release that user should try out My Knox, as Knox Personal is deprecated. I just tried t...
4615
Keep Pushing: We Get 10 More Days to Reform Section 702
In a dramatic middle-of-the-night stand off, a bipartisan set of lawmakers pushing for true reform and privacy protections for Americans bought us some more time to fight! They are holding out for, at a minimum, the requirement of an actual probable cause warrant for FBI access to information...
4616
Changes to the Blog
I have made a few changes to my blog that I’d like to talk about. The first is the various buttons associated with each post: a Facebook Like button, a Retweet button, and so on. These buttons are ubiquitous on the Internet now. We publishers like them because it makes it easier for our readers to share our content. I…
4617
An Update on AMD Processor Security
The AMD Product Security Incident Response Team (PSIRT) is the focal point for reporting potential product security issues to AMD. AMD PSIRT works with both the AMD internal product security team and the external product security ecosystem, including security researchers, industry peers, government organizations…
4618
Docker container security cheat sheet
Discover essential Docker Security Best Practices for DevOps engineers and security professionals. Cheat sheet included for quick implementation!
4619
4620
Reverse engineering a restaurant pager system
Let's reverse engineer a restaurant pager system I bought off the internet!