Facial recognition company lists multiple ways tech could be used by Kyiv
Alleged DDoS attacker arrested at home while apparently 3D printing a gun
By modifying the route53 entries and utilizing the acm-pca private CA one can hijack the calls to AWS API inside the AWS VPC
People who send unsolicited sexual images could serve two years in prison
Research finds “startlingly low understanding” of cybersecurity risks among school leaders
One area that I have encountered quite often over the years is that during recon phase of a bug bounty hunt or pentest a set of AWS access keys are being discovered.
Let’s say you found 50 AWS access keys by drooling and hunting through public Github repos and using other nifty tricks and means.
How...
From today, UK shoppers will have to provide a combination of two forms of identification at checkout when making an online purchase
Accenture says cybercrime underground is split down ideological lines
This white paper explains how basic security controls can protect organisations from the most common cyber attacks.
Security failings led to serious data breach at Tuckers Solicitors
Regulator warns consumers it is planning to shut them down
This summer at Black Hat, we have published research about exploiting Huawei basebands (video recording also available here). The remote code execution attack surface explored in that work was the Radio Resource stack’s CSN.1 decoder. Searching for bugs in CSN.1 decoding turned out to be very fruitf...
Cybersecurity firm joins growing list of companies pulling out of Russia following invasion of Ukraine
BNP Paribas rescinds access privileges for its Russia-based workers over cyber-attack fears
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
US to try former Canadian government employee accused of ransomware attacks
Anonymous revealed it has leaked files from the agency responsible for the supervision of communications, information technology and mass media
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
The new rules are designed to improve trust in digital identity solutions
Cybersecurity must be about growing trust in technologies rather than surveillance and control, argues Prof Adam Joinson