Financial loss to scams mounts, as Americans report caring less about falling victim to cybercrime.
Alex Groce, Associate Professor, School of Informatics, Computing and Cyber Systems, Northern Arizona University Using DeepState, we took a handwritten red-black tree fuzzer and, with minimal effort, turned it into a much more fully featured test generator. The DeepState fuzzer, despite requiring no...
Leeds trio sold fentanyl and carfentanyl internationally
King’s College London claims ACD could help win customer trust
C++ programs using exceptions are problematic for binary lifters. The non-local control-flow “throw” and “catch” operations that appear in C++ source code do not map neatly to straightforward binary representations. One could allege that the compiler, runtime, and stack unwinding library collude to...
Tech giant punished for lack of transparency, valid consent and adequate info
The Global Cyber Alliance and the New York Economic Development Corporation to boost international security cooperation at the London Office for Rapid Cybersecurity Advancement
On December 12, over 150 attendees joined a special, half-day Empire Hacking to learn about pitfalls in smart contract security and how to avoid them. Thank you to everyone who came, to our superb speakers, and to BuzzFeed for hosting this meetup at their office. Watch the presentations again It’s h...
Accenture report urges greater focus on industry-wide collaboration
Civil case against alleged Kremlin/Trump conspiracy updated with new revelations
We open-sourced a fault injection tool, KRF, that uses kernel-space syscall interception. You can use it today to find faulty assumptions (and resultant bugs) in your programs. Check it out! This post covers intercepting system calls from within the Linux kernel, via a plain old kernel module. We’ll...
Experts warn same seller has TBs of more recent data for sale
The Fallout exploit kit uses a new Flash exploit, likely to evade detection.
Trying to make a living as a programmer participating in bug bounties is the same as convincing yourself that you’re good enough at Texas Hold ‘Em to quit your job. There’s data to back this up in Fixing a Hole: The Labor Market for Bugs, a chapter in New Solutions for Cybersecurity, by Ryan Ellis,...
Banking Trojan Anubis was hidden in two Google Play apps.
A new, sophisticated attack kills two birds with one stone.
KoiPhish is a simple yet beautiful relay proxy idea.
The idea for this little project goes back many years. Since I started learning Golang I figured it would be good exercise to finally go ahead an implement it. So, last December during the 35C3 (which is always inspiring congress) I wrote it up.
I...
Thousands expected to take part in competition for school-aged students
Hundreds of pages taken down after Sputnik employees are caught out
Just a list of useful notes when dealing with Macs. I’m pretty new to Macs and there might be other, better solutions to the challenges I had to sovle but these worked for me and I’m learning. :)
Pivoting between accounts and keychain issues After pivoting on a target host and elevating to root it s...