Long Analysis of the M-209
Really interesting analysis of the American M-209 encryption device and its security.
Security
Security Researcher Sued for Disproving Government Statements
This story seems straightforward. A city is the victim of a ransomware attack. They repeatedly lie to the media about…
Zyxel Users Beware: Critical OS Command Injection Flaw Threatens Routers
Zyxel, a communications company, has released an advisory warning users of a critical input validation vulnerability impacting many of its…
API Attack Surface: How to secure it and why it matters
Managing an organization’s attack surface is a complex problem involving asset discovery, vulnerability analysis, and continuous monitoring. There are multiple…
List of Old NSA Training Videos
The NSA’s “National Cryptographic School Television Catalogue” from 1991 lists about 600 COMSEC and SIGINT training videos. There are a…
The Expanding Threat of AI-Generated Deepfakes
In an increasingly digital world, the rise of AI-generated deepfakes represents one of the most significant threats to cybersecurity and…
SQL Injection Attack on Airport Security
Interesting vulnerability: …a special lane at airport security called Known Crewmember (KCM). KCM is a TSA program that allows pilots…
Weekly Update 415
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device. I still find the…
Friday Squid Blogging: Economic Fallout from Falklands Halting Squid Fishing
Details. Blog moderation policy.
Evolution of Attack Surface Management
The Early Days: Basic Asset Management While it was not called ASM, the concept of managing attack surface management began…