Friday Squid Blogging: A Good Year for Squid?
August 13 2021Improved ocean conditions are leading to optimism about this year’s squid catch. As usual, you can also use this squid post to talk about the security stories in the news...
Read moreUsing AI to Scale Spear Phishing
August 13 2021
The problem with spear phishing is that it takes time and creativity to create individualized enticing phishing emails. Researchers are using GPT-3 to attempt to solve that problem:
The...
Read more
Cobalt Strike Vulnerability Affects Botnet Servers
August 11 2021
Cobalt Strike is a security tool, used by penetration testers to simulate network attackers. But it’s also used by attackers — from criminals to governments — to automate their...
Read moreApple Adds a Backdoor to iMessage and iCloud Storage
August 10 2021
Apple’s announcement that it’s going to start scanning photos for child abuse material is a big deal. (Here are five news stories.) I...
Read moreDefeating Microsoft’s Trusted Platform Module
August 9 2021
This is a really interesting story explaining how to defeat Microsoft’s TPM in 30 minutes — without having to solder anything to the motherboard.
Researchers at the security consultancy...
Read more
Friday Squid Blogging: Squid Dog Toy
August 6 2021It’s sold out, but the pictures are cute. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read...
Read more
Fascinating research: “Generating Master Faces for Dictionary Attacks with a Network-Assisted Latent Space Evolution.”
Abstract: A master face is a face image that passes face-based identity-authentication for a large...
Read more
Zoom Lied about End-to-End Encryption
August 5 2021
The facts aren’t news, but Zoom will pay $85M — to the class-action attorneys, and to users — for lying to users about end-to-end encryption, and for giving...
Read moreParagon: Yet Another Cyberweapons Arms Manufacturer
August 3 2021
Forbes has the story:
Paragon’s product will also likely get spyware critics and surveillance experts alike rubbernecking: It claims to give police the power to remotely break into encrypted...
Read more
Recent Comments