Protocol about server identity in SSL/TLS.

Welcome to my blog! My name is Martijn Libbrecht and I have a passion for computers, programming and anything to do with security loopholes. Hope you enjoy!

Last week a report was released showing how the WPA2 WiFi Encryption Protocol can be compromised. This is a serious security alert as it affects every WiFi device you own. Laptops, phones, game consoles, TVs, streaming devices and anything else that uses…

Everybody wins as Google and Microsoft’s security one-upmanship continues

ProtonMail is an encrypted email service that takes a radically different approach to email security. Find out how ProtonMail compares to Gmail.

Researchers identified a new ransomware family called Magniber that uniquely only targets users in South Korea and the Asia Pacific regions.

PROJECT SPACECRAB lets you build comprehensive honeytoken detecting and alerting infrastructure in AWS

Free online DAST, SAST and Behavioral assessment of your iOS or Android app.

A podcast featuring true stories from the dark side of the Internet.

Mastery and availability of new tools and weapons are a necessity in cybersecurity—chief among them are machine learning and AI.

The U.S. Department of Homeland Security and the Federal Bureau of Investigation have issued a rare joint statement warning that hackers are targeting firms in the energy, nuclear, water, aviation and

A Gigantic IoT Botnet has been discovered by researchers at 360 lab. It has already infected millios of devices in preparation for a malware hurricane.

If you are running Redis locally and, like most people as of this writing, you're using a version older than 3.2.7 (released January 31, 2017), I can most likely copy your entire database, drop an ssh key in your authorized_keys file, overwrite arbitrary…

docker-onion-nmap - Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.

Remember how the universe forks into multiple sub-universes every time a measurement is taken? Symbolic execution follows a similar…

Gemalto IDPrime.NET almost certainly isn't the only smartcard vulnerable to ROCA.

You need more than one AWS account. This is to isolate production resources, manage limits (especially API rate limiting), handle costs…

Here are some demos on using Microsoft Word built-in feature Dynamic Data Exchange (DDE) for malware execution and attacks.

Our new open source library, which keeps your Certificate Authority certificate bundle up-to-date.

1 points and 0 comments so far on reddit

Broadcasted on French TV show “Complément d’enquête”.