Real-World Steganography
January 20 2023From an article about Zheng Xiaoqing, an American convicted of spying for China: According to a Department of Justice (DOJ) indictment, the US citizen hid confidential files stolen from his...
Read moreBreaking RSA with a Quantum Computer
January 4 2023A group of Chinese researchers have just published a paper claiming that they can—although they have not yet done so—break 2048-bit RSA. This is something to take seriously....
Read moreFriday Squid Blogging: China Bans Taiwanese Squid Imports
December 10 2022Today I have some squid geopolitical news. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my...
Read moreFriday Squid Blogging: Chinese Squid Fishing
October 28 2022China claims that it is “engaging in responsible squid fishing”:
Chen Xinjun, dean of the College of Marine Sciences at Shanghai Ocean University, made the remarks in response to...
Read more
Critical Vulnerabilities in GPS Trackers
July 21 2022This is a dangerous vulnerability:
An assessment from security firm BitSight found six vulnerabilities in the Micodus MV720, a GPS tracker that sells for about $20 and is...
Read more
Possible Government Surveillance of the Otter.ai Transcription App
February 17 2022A reporter interviews a Uyghur human-rights advocate, and uses the Otter.ai transcription app. The next day, I received an odd note from Otter.ai, the automated transcription app that I had...
Read moreChina’s Olympics App Is Horribly Insecure
January 21 2022China is mandating that athletes download and use a health and travel app when they attend the Winter Olympics next month. Citizen Lab examined the app and found...
Read moreMacOS Zero-Day Used against Hong Kong Activists
November 12 2021Google researchers discovered a MacOS zero-day exploit being used against Hong Kong activists. It was a “watering hole” attack, which means the malware was hidden in a legitimate...
Read moreNation-State Attacker of Telecommunications Networks
October 22 2021Someone has been hacking telecommunications networks around the world:
- LightBasin (aka UNC1945) is an activity cluster that has been consistently targeting the telecommunications sector at a global scale since... Read more
The Proliferation of Zero-days
September 24 2021The MIT Technology Review is reporting that 2021 is a blockbuster year for zero-day exploits:
One contributing factor in the higher rate of reported zero-days is the rapid global proliferation...
Read more
Recent Comments