Critical Vulnerabilities in GPS Trackers
July 21 2022This is a dangerous vulnerability:
An assessment from security firm BitSight found six vulnerabilities in the Micodus MV720, a GPS tracker that sells for about $20 and is...
Read more
Possible Government Surveillance of the Otter.ai Transcription App
February 17 2022A reporter interviews a Uyghur human-rights advocate, and uses the Otter.ai transcription app. The next day, I received an odd note from Otter.ai, the automated transcription app that I had...
Read moreChina’s Olympics App Is Horribly Insecure
January 21 2022China is mandating that athletes download and use a health and travel app when they attend the Winter Olympics next month. Citizen Lab examined the app and found...
Read moreMacOS Zero-Day Used against Hong Kong Activists
November 12 2021Google researchers discovered a MacOS zero-day exploit being used against Hong Kong activists. It was a “watering hole” attack, which means the malware was hidden in a legitimate...
Read moreNation-State Attacker of Telecommunications Networks
October 22 2021Someone has been hacking telecommunications networks around the world:
- LightBasin (aka UNC1945) is an activity cluster that has been consistently targeting the telecommunications sector at a global scale since... Read more
The Proliferation of Zero-days
September 24 2021The MIT Technology Review is reporting that 2021 is a blockbuster year for zero-day exploits:
One contributing factor in the higher rate of reported zero-days is the rapid global proliferation...
Read more
More Detail on the Juniper Hack and the NSA PRNG Backdoor
September 9 2021We knew the basics of this story, but it’s good to have more detail. Here’s me in 2015 about this Juniper hack. Here’s me in 2007 on the NSA backdoor.
Read moreTetris: Chinese Espionage Tool
August 18 2021I’m starting to see writings about a Chinese espionage tool that exploits website vulnerabilities to try and identify Chinese dissidents.
Read moreChina Taking Control of Zero-Day Exploits
July 14 2021
China is making sure that all newly discovered zero-day exploits are disclosed to the government.
Under the new rules, anyone in China who finds a vulnerability must tell the...
Read more
AI-Piloted Fighter Jets
June 25 2021
News from Georgetown’s Center for Security and Emerging Technology:
China Claims Its AI Can Beat Human Pilots in Battle: Chinese state media reported that an AI system had...
Read more
Recent Comments