Opsec Cyber vulnerabilities Archives - Page 9 of 20

Category Archives: vulnerabilities

Vulnerability in the Kaspersky Password Manager

July 6 2021 By Bruce Schneier in Security, vulnerabilities

A vulnerability (just patched) in the random number generator used in the Kaspersky Password Manager resulted in easily guessable passwords:

The password generator included in Kaspersky Password Manager had...
Read more

Risks of Evidentiary Software

June 29 2021 By Bruce Schneier in cybersecurity, Forensics, Security, vulnerabilities

Over at Lawfare, Susan Landau has an excellent essay on the risks posed by software used to collect evidence (a Breathalyzer is probably the most obvious example).

Bugs...

NFC Flaws in POS Devices and ATMs

June 28 2021 By Bruce Schneier in Security, vulnerabilities

It’s a series of vulnerabilities:

Josep Rodriguez, a researcher and consultant at security firm IOActive, has spent the last year digging up and reporting vulnerabilities in the so-called near-field...
Read more

Peloton Vulnerability Found and Fixed

June 18 2021 By Bruce Schneier in Security, vulnerabilities

Researchers have discovered a vulnerability in Peloton stationary bicycles, one that would give the attacker complete control over the device. The attack requires physical access to the Peloton, so it’s...

Security Vulnerability in Apple’s Silicon “M1” Chip

June 1 2021 By Bruce Schneier in Apple, Security, vulnerabilities

The website for the M1racles security vulnerability is an excellent demonstration that not all vulnerabilities are exploitable. Be sure to read the FAQ through to the end. EDITED TO ADD:...

Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices

May 27 2021 By Daniel Pany in Dan Perez, Homepage Carousel, Latest Blog Posts, Malware, Sarah Jones, Security, Threat Research, TTPs, vulnerabilities

On April 20, 2021, Mandiant published detailed results of our investigations into compromised Pulse Secure devices by suspected Chinese espionage operators. This blog post...

Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices

May 27 2021 By Daniel Pany in Dan Perez, Homepage Carousel, Latest Blog Posts, Malware, Sarah Jones, Security, Threat Research, TTPs, vulnerabilities

On April 20, 2021, Mandiant published detailed results of our investigations into compromised Pulse Secure devices by suspected Chinese espionage operators. This blog post...

New Spectre-Like Attacks

May 5 2021 By Bruce Schneier in Security, vulnerabilities

There’s new research that demonstrates security vulnerabilities in all of the AMD and Intel chips with micro-op caches, including the ones that were specifically engineered to be resistant...

Tesla Remotely Hacked from a Drone

May 4 2021 By Bruce Schneier in Security, vulnerabilities

This is an impressive hack:

Security researchers Ralf-Philipp Weinmann of Kunnamon, Inc. and Benedikt Schmotzle of Comsecuris GmbH have found remote zero-click security vulnerabilities in an open-source software component...
Read more