Gemalto IDPrime.NET almost certainly isn't the only smartcard vulnerable to ROCA.

You need more than one AWS account. This is to isolate production resources, manage limits (especially API rate limiting), handle costs…

Here are some demos on using Microsoft Word built-in feature Dynamic Data Exchange (DDE) for malware execution and attacks.

Our new open source library, which keeps your Certificate Authority certificate bundle up-to-date.

1 points and 0 comments so far on reddit

Broadcasted on French TV show “Complément d’enquête”.

Apple and Google assures to find remedies to fix Krack WiFi flaw to stop hackers to steal credit card numbers, passwords and private messages from...

Before we get started, fair warning: this is going to be a post about a fairly absurd (but non-trivial!) attack on cryptographic systems. But that’s ok, because it’s based on a fairly a…

The Cloud Native Computing Foundation (CNCF) is probably best known for being the home of the Kubernetes container orchestration project, but there plenty of other projects that now fall under the…

protocol about server session SSL/TLS.

iOS-SandBox-Dumper - SandBox-Dumper makes use of multiple private libraries to provide exact locations of the application sandbox, application bundle and some other interesting information

1 points and 0 comments so far on reddit

October 2017, Microsoft patch Tuesday included an optional security advisory, ADV170014, this advisory makes reference to a bug on the NTLM authentication scheme, that allows a malicious attacker t…

You need more than one AWS account. This is to isolate production resources, manage limits (especially API rate limiting), handle costs…

Disclaimer : I am not an electronics engineer. I just play one on Twitter. A lot of the following might be heresy to someone who ever ...

It is time to sunset the practice of producing reports for reporting’s sake to satisfy regulators. Organizations need to go beyond just producing reports to continuous monitoring of their compliance position. Automation becomes key here. In my post I discuss…

Continuing with the OWASP Top 10 series we are on number 2, Broken Authentication and Session Management. What is it? How can be exploited? This episode breaks down what this covers and why it's number two in the Top 10.  OWAPS A2 - Broken Authentication…

Security Awareness Blog blog pertaining to Three Commandments to Building a Mature Awareness Program

A short story about CCTV cameras in hotels and how to hack them.