» Tag

security

437 posts

Aug 4, 20267.30
Three New Attack Techniques Targeting Google Passkey System Revealed
Three new attack techniques targeting passkey credentials in Google Password Manager have been revealed, highlighting significant security risks.
authentication google malware passkey
Aug 4, 20267.30
Hollow-LLM Attack: Ghost Weights That Fool Zero-Knowledge LLM Verification
The Hollow-LLM attack examines the impact of ghost weights on zero-knowledge verification.
llm machine-learning security verification
Aug 3, 20267.31
H96 Android TV Boxes Used for Ad Fraud and Residential Proxies
H96 Android TV boxes are implicated in ad fraud and proxy services, raising significant security concerns for engineers.
ad-fraud android firmware iot
Ad
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com
Aug 1, 20267.31
WordJS: A Node.js CMS with Secure Plugin Isolation
WordJS is a Node.js CMS that enhances security by running plugins in isolated processes.
cms nodejs plugins security
Jul 31, 20267.30
New Defcon Badges Feature Open-Source Chip as Security Key
Defcon 2023 introduces badges with Andrew Huang's open-source chip, doubling as a security key. Attendees can inspect the chip's internal structures.
defcon hardware open-source security
Jul 30, 20267.31
Open Source Project Tricks AI Scrapers with Poisoned Font
ShieldFont tricks AI scrapers by transforming readable text into gibberish. Learn more.
ai fonts open-source scraping
Jul 30, 20267.30
KindaRails2Shell: Arbitrary File Read Leading to RCE in Rails Active Storage
Arbitrary file read vulnerability in Rails Active Storage via vips; patches available.
cve rails rce security
Jul 28, 20267.30
DMARC Has Been Public Since 2012. 68.4% of Domains Still Don't Enforce It
DMARC has been public since 2012, yet 68.4% of domains still do not enforce it, raising concerns for email security.
authentication dmarc dns email
Jul 28, 20267.30
Discovering Cryptographic Weaknesses with Claude
Claude Mythos Preview reveals new attack methods against cryptographic algorithms, notably HAWK and AES, showcasing AI's potential in cryptography.
ai cryptography encryption research
Jul 22, 20267.30
AI and Cryptography: Discoveries in Bron Labs's bron-crypto Library
Bron Labs's bron-crypto library faced AI audits that uncovered zero-day vulnerabilities. Read more for details.
ai audit cryptography security