Auditor reports missing or non-existent facts in FBI Foreign Intelligence Surveillance Act applications
Hotel chain Marriott International suffers second data breach
TL;DR: We have improved Echidna with tons of new features and enhancements since it was released—and there’s more to come. Two years ago, we open-sourced Echidna, our property-based smart contract fuzzer. Echidna is one of the tools we use most in smart contract assessments. According to our records...
Survey finds 42% of Brits do not back up their data (and many don’t even know how to)
Data exposed online by a canvassing app used by the Republican party
(This posting is cross-posted between the Zeek blog and the Trail of Bits blog). The Zeek Network Security Monitor provides a powerful open-source platform for network traffic analysis. However, from its network vantage point, Zeek lacks access to host-level semantics, such as the process and user a...
China’s plans to replace TCP/IP being pushed through at ITU level
Iranians were using third-party version of the app
A few weeks ago, we went to the 24th Financial Cryptography (FC) conference and the Workshop on Trusted Smart Contracts (WTSC), where we presented our work on smart contract bug categorization (see our executive summary) and a poster on Echidna. Although FC is not a blockchain conference, it feature...
Users take to social media complaining of online hacking attempts
Adverts selling masks and other COVID-19 essentials appear on Instagram and Facebook despite ban
TL;DR: Trail of Bits has developed ntfs_journal_events, a new event-based osquery table for Windows that enables real-time file change monitoring. You can use this table today to performantly monitor changes to specific files, directories, and entire patterns on your Windows endpoints. Read the sche...
US court orders injunctions against two telecom carriers that facilitated millions of fraudulent robocalls
Carnegie Mellon University adds a cybersecurity track to its Master of Science in Information Technology program
Malgré les efforts des constructeurs, les automates industriels sont loin d’avoir un niveau de sécurité satisfaisant. Trop peu d’entre eux font d’ailleurs l’effort de se lancer dans ce challenge. Si l’on ne peut pas avoir de composants sécurisés, que faire [...] Lire la suite
Scam email dupes receivers into believing they’ve come into contact with someone infected with the coronavirus
Online misinformation could cost lives, warns minister
Voatz allows voters to cast their ballots from any geographic location on supported mobile devices. Its mobile voting platform is under increasing public scrutiny for security vulnerabilities that could potentially invalidate an election. The issues are serious enough to attract inquiries from the D...
Group says it will release stolen data but firm claims network remains intact
Juniper Research says merchants need to improve customers education