https://malgregator.com/tags/tor/ Recent content in Tor on malgregator Hugo -- gohugo.io en you@example.com you@example.com Fri, 26 Oct 2018 08:14:00 +0000 https://malgregator.com/post/week-43-2018/ Fri, 26 Oct 2018 08:14:00 +0000 you@example.com https://malgregator.com/post/week-43-2018/ A zero-day vulnerability in the jQuery File Upload plugin is actively exploited for at least three years. Patch now! https://malgregator.com/post/week-37-2018/ Fri, 14 Sep 2018 08:07:00 +0000 you@example.com https://malgregator.com/post/week-37-2018/ Tesla model S is using a 40bit challenge response scheme broken back in 2005. Researchers stole a car in ~6 seconds with precomputed tables. https://malgregator.com/post/week-12-2018/ Fri, 23 Mar 2018 07:50:00 +0000 you@example.com https://malgregator.com/post/week-12-2018/ Facebook, Google, Cisco, WhatsApp and other industry partners get together to create Message Layer Security as an open standard for end-to-end encryption with formal verification. Messaging Layer Security is now an IETF working group as well. https://malgregator.com/post/week-44-2017/ Wed, 08 Nov 2017 22:26:00 +0000 you@example.com https://malgregator.com/post/week-44-2017/ There are at least 14 newly discovered vulnerabilities in the Linux kernel USB subsystem. The vulnerabilities were found by the Google syzkaller kernel fuzzer. According to the researchers, all of them can be triggered with a crafted malicious USB device in case an attacker has physical access to the machine. https://malgregator.com/post/week-19-2017/ Tue, 16 May 2017 22:50:00 +0000 you@example.com https://malgregator.com/post/week-19-2017/ You have probably heard about the WannaCry/WannaCrypt/WannaWhatever worm spreading ransomware, because of the sensation created by parties profiting from the scare tactics. But also because it is using really good spreading technique - exploiting MS17-010 SMB vulnerability leaked from the NSA. Some post-mortem analysis of the first version (with the killswich) and TheShadowBrokers blog are listed below. Crypto is working, so no trivial decrypter is probable, except if the keys are published.