211
Yubikey guide for Git Signing, SSH Auth, U2F 2FA, and 1Password (2017)
Read the latest thinking, news and research from the team at Container Solutions in our Cloud Native Blog.
212
213
QCSuper: A tool for capturing 2G/3G/4G air traffic on Qualcomm-based phones
QCSuper, an open-source tool, helps capture mobile network frames from Qualcomm-based Android devices, enabling analysis in Wireshark and more.
214
German Data Privacy Commissioner Says Article 13 Inevitably Leads to Filters
German Data Privacy Commissioner Ulrich Kelber is also a computer scientist, which makes him uniquely qualified to comment on the potential consequences of the proposed new EU Copyright Directive. The Directive will be voted on at the end of this month, and its Article 13 requires that online...
215
216
217
Auditing Rust Crypto: The First Hours
The Latest News from Research at Kudelski Security
218
219
Malicious remote code execution backdoor discovered bootstrap-sass Ruby gem
On March 26, 2019, a malicious version of the popular bootstrap-sass package, that has been downloaded a total of 28 million times to date, was published to the official RubyGems repository.
220
221
DEF CON and Stack Overflow: What Our Traffic Says About Cybersecurity
Stack Overflow traffic during DEF CON shows what technologies are trending in the hacker community
222
The Supreme Backdoor Factory
Recently I was playing with VirusTotal Intelligence and while testing some dynamic behavior queries I stumbled upon this strange PE binary (MD5: …
223
AWS Control Tower
Earlier this month I met with an enterprise-scale AWS customer. They told me that they are planning to go all-in on AWS, and want to benefit from all that we have learned about setting up and running AWS at scale. In addition to setting up a Cloud Center of Excellence, they want to set up […]
224
NextDNS Joins Firefox’s Trusted Recursive Resolver
NextDNS Joins Firefox’s Trusted Recursive Resolver Program Committing to Data Retention and Transparency Requirements that Respect User Privacy Firefox a
225
Making Containers More Isolated: An Overview of Sandboxed Container Technologies
Currently available container-based infrastructure has limitations because containers are not truly sandboxed and share the host OS kernel. The root of the problem is the weak separation between containers when the host OS creates a virtualized userland for each container. This blog covers four unique projects from…
226
Tethered Jailbreaks Are Back
Earlier today, a new iPhone Boot ROM exploit, checkm8 (or Apollo or Moonshine), was published on GitHub by axi0mX, affecting the iPhone 4S through the iPhone X. The vulnerability was patched in devices with A12 and A13 CPUs. As of this writing, the iPhone XS, XS Max, XR, 11, 11 Pro and 11 Pro Max […]
227
A Technical and Cultural Assessment of the Mueller Report PDF
What can we learn about the Mueller Report from the PDF file released by the Department of Justice (DoJ) on April 18, 2019?
228
Oak, a Free and Open Certificate Transparency Log
Update: Feb. 5 2020 The Let’s Encrypt CT logs are now included in approved log lists and are usable by all publicly-trusted certificate authorities. Today we are announcing a new Certificate Transparency log called Oak. The Oak log will be operated by Let’s Encrypt and all publicly trusted certificate authorities will…
229
230
CVE-2019-1347: When a mouse over a file is enough to crash your system
Advanced security testing platforms for hardware and software investigations. Collaborative tools, proven attack libraries, and expert services for security teams.
231
232
Public DNS in Taiwan the Latest Victim of BGP Hijack
Guest Post: Traffic going through a public DNS in Taiwan was rerouted to an entity in Brazil for about three and a half minutes.
233
Decentralized DNS with the Handshake Naming System
Starting since version 1.30, the Mac, Linux, and Windows Private Internet Access (PIA) desktop clients have come with the ability to change the selected
234
An Update on Plugin Security
Learn about Figma's response to the security vulnerabilities that were reported in a 3rd-party library that we use for plugin security
235
DNS-over-HTTPS Policy Requirements for Resolvers
Over the past few months, we’ve been experimenting with DNS-over-HTTPS (DoH), a protocol which uses encryption to protect DNS requests and responses, with the goal of deploying DoH by default ...
236
Ukrainian Billionaires Allegedly Laundered Money in the US
Ukraine’s largest bank is taking its battle with its former owners to US shores. In a civil lawsuit filed in the state court of Delaware, PrivatBank accuses Ihor Kolomoisky and Gennady Bogolyubov, the billionaires who owned the bank before it was nationalized three years ago, of large-scale money laundering in the…
237
Google Chrome is ditching its XSS detection tool
The Sophos Blog
238
What’s Next in Making Encrypted DNS-over-HTTPS the Default
More than 70,000 users have already chosen on their own to explicitly enable DoH in Firefox Release edition. We are close to releasing DoH in the USA, and we have a few updates to share.
239
Bad Binder: Android In-the-Wild Exploit
Posted by Maddie Stone, Project ZeroIntroductionOn October 3, 2019, we disclosed issue 1942 (CVE-...
240
Fearless Security: Memory Safety
Memory safety violations can cause programs to crash unexpectedly and can be exploited to alter intended behavior--languages can manage this multiple ways