InfoSec Week 2, 2019
Personal information of many German politicans were published online. Since then, Police arrested 20 years old suspect.
Posted
#Weekly-News
InfoSec Week 52, 2018
The Chinese battery expert is charged with stealing trade secrets from US employer, as he prepared to return home. Forensics found deleted research materials not related to his contract on a USB voluntarily provided to a supervisor.
Posted
#Weekly-News
InfoSec Week 51, 2018
Google Project Zero published a blog about the FunctionSimSearch open-source library which is capable to find similar functions in the assembly. They are using it to detect code statically-linked vulnerable library functions in executables.
Posted
#Weekly-News
InfoSec Week 49, 2018
Apple included support for the WebAuthentication API in the latest Safari Release 71 (Technology Preview). The new WebAuthentication as implemented supports USB-based CTAP2 devices.
Posted
#Weekly-News
InfoSec Week 16, 2018
Google disables domain fronting capability in their App Engine, which was used to evade censorship. What a fortunate timing.
Posted
#Weekly-News
InfoSec Week 12, 2018
Facebook, Google, Cisco, WhatsApp and other industry partners get together to create Message Layer Security as an open standard for end-to-end encryption with formal verification. Messaging Layer Security is now an IETF working group as well.
Posted
#Weekly-News
InfoSec Week 7, 2018
The Fidelis Cybersecurity researcher Jason Reaves demonstrated how covertly exchange data using X.509 digital certificates. The proof of concept code is using SubjectKeyIdentifier and generating certificates on the fly.
Posted
#Weekly-News
InfoSec Week 49, 2017
The 'Janus' Android vulnerability (CVE-2017-13156) allows attackers to modify the code in applications without affecting their signatures. The root of the problem is that a file can be a valid APK file and a valid DEX file at the same time. The vulnerability allows attackers to inject malware into legitimate application and avoiding detection.
Posted
#Weekly-News
InfoSec Week 45, 2017
Researchers exploited antivirus software quarantine mechanism to gain privileges by manipulating the restore process from the virus quarantine. By abusing NTFS directory junctions, the AV quarantine restore process can be manipulated, so that previously quarantined files can be written to arbitrary file system locations.
Posted
#Weekly-News
InfoSec Week 33, 2017
Danish conglomerate Maersk expects to lose between $200-300m due to Petya ransomware infection, according to their latest quarterly results.
Posted
#Weekly-News