Sophos moves to augment cloud business strategy with acquisition of next-gen cloud infrastructure security company
Australia's Early Warning Network says staff quickly shut down systems upon detecting intruder
Just a list of useful notes when dealing with Macs. I’m pretty new to Macs and there might be other, better solutions to the challenges I had to sovle but these worked for me and I’m learning. :)
Pivoting between accounts and keychain issues After pivoting on a target host and elevating to root it s...
20-year-old arrested in German data breach said he was annoyed with government officials
Malwarebytes warns users of double whammy
This year for CSAW CTF, Trail of Bits contributed two cryptography problems. In the first problem, you could combine two bugs to break DSA much like the Playstation 3 firmware hackers. The other challenge–-weirder and mathier–-was split into two parts: one for the qualifiers, one in finals. This cha...
Exchange halts sends and receives after $1m blitz
UK victims still lost nearly £1.2m in first 10 months of 2018
With 2019 a day away, let’s reflect on the past to see how we can improve. Yes, let’s take a long look back 30 years and reflect on the original fuzzing paper, An Empirical Study of the Reliability of UNIX Utilities, and its 1995 follow-up, Fuzz Revisited, by Barton P. Miller. In this blog post, […]
Boards should recruit members with cyber expertise, finds ACSC report
285 KrisFlyer accounts exposed because of software glitch
The Trail of Bits SummerCon Fellowship program is now accepting applications from emerging security researchers with excellent project ideas. Fellows will explore their research topics with our guidance and then present their findings at SummerCon 2019. We will be reserving at least 50% of our fundi...
WhatsApp Gold fake chain messages have returned
Tripwire study highlights major concerns over popular technology
The Trail of Bits cryptographic services team contributed two cryptography CTF challenges to the recent CSAW CTF. Today we’re going to cover the easier one, titled “Disastrous Security Apparatus – Good luck, ‘k?” This problem involves the Digital Signature Algorithm (DSA) and the way an apparently s...
27% of consumers feel pressure from brands when trying to achieve their New Year’s goals
Weather Channel app allegedly deceived users into handing over location data
Web Applications and Services use cookies to authenticate sessions and users. An adversary can pivot from a compromised host to Web Applications and Internet Services by stealing authentication cookies from browsers and related processes. At the same time this technique bypasses most multi-factor au...
Users are tricked into entering personal and financial details
Spyware in disguise passes for legitimate Android apps in Google Play.