https://malgregator.com/tags/cryptography/ Recent content in Cryptography on malgregator Hugo -- gohugo.io en you@example.com you@example.com Wed, 12 Jul 2023 00:00:00 +0000 https://malgregator.com/post/splitting-cryptographic-key/ Wed, 12 Jul 2023 00:00:00 +0000 you@example.com https://malgregator.com/post/splitting-cryptographic-key/ Use split key split with openssl and bash to protect secrets in CI/CD pipeline. https://malgregator.com/post/key-management/ Wed, 15 Aug 2018 16:20:00 +0000 you@example.com https://malgregator.com/post/key-management/ Modern key management in a large organization is primarily described by bureaucratic procedures and compliance requirements due to financial liability. No one personnel hold all the keys required for a task. To minimize the need for trust in a day to day operations, the problem is partially solved with the three basic principles - separation of duties, dual control and split knowledge. https://malgregator.com/post/week-8-2019/ Fri, 22 Feb 2019 08:40:00 +0000 you@example.com https://malgregator.com/post/week-8-2019/ Dutch security researcher Victor Gevers found misconfigured MongoDB database containing facial recognition and other sensitive information about the Uyghur Muslim minority in China. Looks like the company behind the database is Chinese surveillance company SenseNets. https://malgregator.com/post/week-7-2019/ Fri, 15 Feb 2019 08:47:00 +0000 you@example.com https://malgregator.com/post/week-7-2019/ Ubiquiti network devices are being remotely exploited, via port 10001 discovery service. Results in loss of device management, also being used as a weak UDP DDoS amplification attack: 56 bytes in, 206 bytes out. https://malgregator.com/post/week-6-2019/ Thu, 07 Feb 2019 08:30:00 +0000 you@example.com https://malgregator.com/post/week-6-2019/ Insurance Company says to the Mondelez customer that the NotPetya ransomware attack was an act of cyber war and therefore not covered by the policy. https://malgregator.com/post/week-3-2019/ Fri, 18 Jan 2019 08:30:00 +0000 you@example.com https://malgregator.com/post/week-3-2019/ 35-year-old vulnerability has been discovered in the SCP file transfer utility. According to the advisory impact section, 'Malicious scp server can write arbitrary files to scp target directory, change the target directory permissions and to spoof the client output.' https://malgregator.com/post/week-2-2019/ Fri, 11 Jan 2019 07:54:00 +0000 you@example.com https://malgregator.com/post/week-2-2019/ Personal information of many German politicans were published online. Since then, Police arrested 20 years old suspect. https://malgregator.com/post/week-1-2019/ Fri, 04 Jan 2019 08:20:00 +0000 you@example.com https://malgregator.com/post/week-1-2019/ Let's Encrypt recapitulated the last year in the operation of their ACME based certification authority, and summarized the challenges that they will work on in 2019. They intend to deploy multi-perspective validation, checking multiple distinct Autonomous Systems for domain validation, preventing potential BGP hijacks. They also plan to run own Certificate Transparency (CT) log. https://malgregator.com/post/week-52-2018/ Fri, 28 Dec 2018 08:23:00 +0000 you@example.com https://malgregator.com/post/week-52-2018/ The Chinese battery expert is charged with stealing trade secrets from US employer, as he prepared to return home. Forensics found deleted research materials not related to his contract on a USB voluntarily provided to a supervisor. https://malgregator.com/post/week-51-2018/ Thu, 20 Dec 2018 08:41:00 +0000 you@example.com https://malgregator.com/post/week-51-2018/ Google Project Zero published a blog about the FunctionSimSearch open-source library which is capable to find similar functions in the assembly. They are using it to detect code statically-linked vulnerable library functions in executables.