Recently, security researchers discovered that Apple was sending safe browsing data to Tencent for all Chinese users. This revelation has brought the underlying security and privacy guarantees of the safe browsing protocol under increased scrutiny. In particular, safe browsing claims to protect user...
Sophisticated May attack targeted 1400 WhatsApp users
Carriers receiving USF subsidy will be told to find alternatives
A few weeks ago I had the inspiring experience of attending the annual Grace Hopper Celebration (GHC), the world’s largest gathering of women in technology. Over four days in Orlando, Florida, GHC hosted a slew of workshops and presentations, plus a massive career fair with over […]
Implementing cybersecurity as an afterthought is a mistake
Effective DevSecOps blends automation with manual intervention
MITRE just updated the ATT&CK Framework to include Cloud TTPs.
The update includes techniques for stealing cookies from machines and using them for lateral movement. These are the two techniques I helped contribute to the matrix:
Credential Access - Steal Web Session Cookie Lateral Movement - We...
Excessive screen time is damaging our productivity and relationships
Forrester's 2020 vision of integrity attacks and deployment of anti-surveillance technology
As a summer intern at Trail of Bits, I used the PlusCal and TLA+ formal specification languages to explore Ethereum’s CBC Casper consensus protocol and its Byzantine fault tolerance. This work was motivated by the Medium.com article Peer Review: CBC Casper by Muneeb Ali, Jude […]
Broadcasters also disrupted in unprecedented operation
DNC hackers APT28 up to their old tricks again
A lot of companies are working on Ethereum smart contracts, yet writing secure contracts remains a difficult task. You still have to avoid common pitfalls, compiler issues, and constantly check your code for recently discovered risks. A recurrent source of vulnerabilities comes from the early state...
Researcher claims firm has failed to respond to his outreach
Captain “Sully” Sullenberger delivers keynote on performing under pressure
(ISC)² marks 30th anniversary with 9th annual conference
Boards need CISOs to explain cybersecurity in a relatable way
Dark web version of news platform helps to circumvent censorship
Italy’s biggest lender hit by cyber-attack
Data leak came from unsecured Elasticsearch instance