91
Nevada cops use civil forfeiture to steal a veterans life savings
Last February, while driving down a Nevada highway on the way to visit his daughters, Stephen Lara was robbed in plain sight. But his assailants […]
92
CVE-2021-22555: Turning \x00\x00 into 10000$
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
93
Microsoft Teams: 1 feature, 4 vulnerabilities
Microsoft Team's link preview feature is susceptible to spoofing and vulnerable to Server-Side Request Forgery. Team's Android users can be DoS'ed and, in the past, their IP address could be leaked.
94
How to Hack APIs in 2021
Detectify Crowdsource is not your average bug bounty platform. It’s an invite-only community of the best ethical hackers who are passionate about securing modern technologies ...
95
96
Disclosing E2EE vulnerability in multiple Matrix clients
Matrix, the open protocol for secure decentralised communications
97
98
State Partitioning
State Partitioning is the new privacy feature called Total Cookie Protection, which will be available in ETP Strict Mode in Firefox 86.
99
100
BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
101
Docker Security Cheat Sheet
Website with the collection of all the cheat sheets of the project.
102
A deep dive on a Facebook reseller of bikes stolen in Colorado
Bike Index tracks a Colorado-to-Mexico stolen bike pipeline - and learns things along the way
103
Escaping VirtualBox 6.1: Part 1
This post is about a VirtualBox escape for the latest currently available version (VirtualBox 6.1.16 on Windows). The vulnerabilities were discovered and exploited by our team Sauercl0ud as part of the RealWorld CTF 2020/2021. The vulnerability was known to the organizers, requires the guest to be able to insert…
104
How to handle secrets on the command line
How to keep secret credentials safe on the command line.
105
The modern packager’s security nightmare
One of the most important tasks of the distribution packager is to ensure that the software shipped to our users is free of security vulnerabilities. While finding and fixing the vulnerable code is…
106
107
What is BGP? – BGP routing explained
Border Gateway Protocol (BGP) is the routing protocol for the Internet. Much like the post office processing mail, BGP picks the most effecient routes for delivering Internet traffic.
108
The Gates to Hell: Apple’s Notarizing
NeoFinder is a powerful and very fast disk cataloging tool for songs, videos, photos, all your digital documents
109
Firefox Release Includes Total Cookie Protection and Multiple Picture-in-Picture
Beginning last year, the internet began playing a bigger role in our lives than ever before. In the US, we went from only three percent of workers to more
110
Securing a Postgres Database
A comprehensive overview of the best practices for securing access to PostgreSQL databases.
111
Cryptocurrency scams cost owners $7.7B in 2021, driven by DeFi-based “rug pulls”
Crypto scams were once again the largest form of crypto crime, with over $7.7 billion worth of cryptocurrency taken from victims worldwide.
112
Apple’s device surveillance plan is a threat to user privacy – and press freedom
The backlash from privacy and human rights advocates to Apple's new plan this month for scanning photos on user devices to detect known child sexual abuse images has been loud and nearly unanimous. The tech raises press freedom problems, too.
113
New EU data blockage as German court would ban many cookie management providers
Alston & Bird’s Dan Felz and Peter Swire look at the recent Wiesbaden Administrative Cou
114
Google launches new vulnerability reward platform
Posted by Jan Keller, Technical Program Manager, Google VRP A little over 10 years ago , we launched our Vulnerability Rewards Program (VR...
115
Why Authorization Is Hard
There's a fundamental tension in authorization. Is it business logic or authorization logic? Should it be in the app, or separate? Let’s talk about what makes a
116
Grindr to be fined almost €10M over GDPR complaint
The Norwegian Data Protection Authority confirmed that Grindr did not receive valid consent from users and announces a fine of 100 Mio NOK (€ 9.63 Mio) on Grindr.
117
Victory at the High Court against the government’s use of 'general warrants’
Today, the UK High Court has quashed a decision by the Investigatory Powers Tribunal (IPT), and ruled that section 5 of the Intelligence Services Act (ISA) 1994 does not permit the issuing of general warrants to authorise property interference and certain forms of computer hacking.
118
Fastmail accounts blocked in Russia, here's what we know
Fastmail is the latest email provider to be blocked by Russia.
119
"Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
Wiz Research recently discovered a series of alarming vulnerabilities that highlight the supply chain risk of open source code, particularly for customers of cloud computing services.
120
How I hijacked the top-level domain of a sovereign state
Here’s how I temporarily took over 50% of all DNS traffic for the TLD of the Democratic Republic of Congo.