- + Using Legitimate GitHub URLs for Malware—Interesting social-engineering attack vector : McAfee released a report on a new LUA malware loader distributed through what appeared to be a l...
- + Upcoming Speaking Engagements—This is a current list of where and when I am scheduled to speak: I’m speaking twice at RSA Conference 2024 in San Francisco. I’ll...
- + Friday Squid Blogging: The Awfulness of Squid Fishing Boats—It’s a pretty awful story . As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered...
- + Smuggling Gold by Disguising it as Machine Parts—Someone got caught trying to smuggle 322 pounds of gold (that’s about a quarter of a cubic foot) out of Hong Kong. It was disguised as machine...
- + Backdoor in XZ Utils That Almost Happened—Last week, the Internet dodged a major nation-state attack that would have had catastrophic cybersecurity repercussions worldwide. It’s a catastrophe ...
- + Friday Squid Blogging: Squid Trackers—A new bioadhesive makes it easier to attach trackers to squid. Note: the article does not discuss squid privacy rights. As usual, you can also...
- + Other Attempts to Take Over Open Source Projects—After the XZ Utils discovery, people have been examining other open-source projects. Surprising no one, the incident is not unique: The OpenJS F...
- + Using AI-Generated Legislative Amendments as a Delaying Technique—Canadian legislators proposed 19,600 amendments —almost certainly AI-generated—to a bill in an attempt to delay its adoption. I wrote ...
- + In Memoriam: Ross Anderson, 1956–2024—Last week, I posted a short memorial of Ross Anderson. The Communications of the ACM asked me to expand it. Here’s the longer version . ...
- + X.com Automatically Changing Link Text but Not URLs—Brian Krebs reported that X (formerly known as Twitter) started automatically changing twitter.com links to x.com links. The problem is: (1) it chan...
- + New Lattice Cryptanalytic Technique—A new paper presents a polynomial-time quantum algorithm for solving certain hard lattice problems. This could be a big deal for post-quantum crypto...
As of 4/23/24 6:56am. Last new 4/22/24 4:30pm. Score: 354
- Next feed in category: Packet Storm Security