Security - Sam Bent

AES-GCM

AES-GCM Nonce Reuse: Detection and Mitigation of Cryptographic Failures

AES-GCM nonce reuse enables complete cryptographic compromise through forbidden attacks that recover authentication keys and forge arbitrary ciphertexts via polynomial interpolation in finite fields.

Cisco

Cisco Licensing Utility Under Siege: Backdoor Account Exploited in the Wild

Reports are emerging that malicious actors are actively exploiting a critical vulnerability in unpatched Cisco Smart Licensing Utility (CSLU) instances.

WordPress

Critical Vulnerability Discovered in WP Ghost Plugin: Unauthenticated Remote Code Execution Possible

A significant security flaw has been identified in the popular WordPress security plugin, WP Ghost, potentially exposing millions of websites to remote code execution (RCE) attacks.

VSCode

Malicious VSCode Extensions Unleash In-Development Ransomware: A Failure of Microsoft's Marketplace Oversight

The VSCode Marketplace, a central repository for extensions that enhance the popular code editor, has been compromised by two malicious extensions deploying in-development ransomware.

Darknet

Darknet Data Trove Swells, Raising Concerns Over Federal Oversight

A significant expansion of darknet data repositories has been reported, with one prominent aggregator noting a 22% surge in its collection over the past year.

quantum computing

HP's 'Quantum-Resistant' Printers Raise Security Questions and Skepticism

Hewlett-Packard recently announced that its 8000 Series enterprise and commercial printers – including the Color LaserJet Enterprise MFP 8801, Mono MFP 8601, and LaserJet Pro Mono SFP 8501 models – will incorporate new quantum-resistant application-specific integrated circuits (ASICs)

jailbreaking

Jailbroken Devices Expose Users to Alarming Malware Risks, Study Finds

New research raises serious concerns about the security risks associated with jailbreaking or rooting mobile devices.