Fake Signal and Telegram Apps in the Google Play Store
September 14 2023Google removed fake Signal and Telegram apps from its Play store.
An app with the name Signal Plus Messenger was available on Play for nine months and had been...
Read more
Zero-Click Exploit in iPhones
September 13 2023Make sure you update your iPhones:
Citizen Lab says two zero-days fixed by Apple today in emergency security updates were actively abused as part of a zero-click exploit chain...
Read more
Cars Have Terrible Data Privacy
September 12 2023A new Mozilla Foundation report concludes that cars, all of them, have terrible data privacy. All 25 car brands we researched earned our *Privacy Not Included warning label—making cars the...
Read moreOn Robots Killing People
September 11 2023The robot revolution began long ago, and so did the killing. One day in 1979, a robot at a Ford Motor Company casting plant malfunctioned—human workers determined that it...
Read moreFriday Squid Blogging: Glass Squid Video
September 9 2023Here’s a fantastic video of Taonius Borealis, a glass squid, from NOAA. As usual, you can also use this squid post to talk about the security stories in the news...
Read moreLLMs and Tool Use
September 8 2023Last March, just two weeks after GPT-4 was released, researchers at Microsoft quietly announced a plan to compile millions of APIs—tools that can do everything from...
Read moreThe Hacker Tool to Get Personal Data from Credit Bureaus
September 7 2023The new site 404 Media has a good article on how hackers are cheaply getting personal information from credit bureaus:
This is the result of a secret weapon criminals...
Read more
Cryptocurrency Startup Loses Encryption Key for Electronic Wallet
September 6 2023The cryptocurrency fintech startup Prime Trust lost the encryption key to its hardware wallet—and the recovery key—and therefore $38.9 million. It is now in bankruptcy. I can’t understand why anyone...
Read moreInconsistencies in the Common Vulnerability Scoring System (CVSS)
September 5 2023Interesting research:
Shedding Light on CVSS Scoring Inconsistencies: A User-Centric Study on Evaluating Widespread Security Vulnerabilities
Abstract: The Common Vulnerability Scoring System (CVSS) is a popular method for evaluating the...
Read more
Recent Comments