DUHK Attack Exposes Gaps in FIPS Certification
The DUHK Attack leverages a 20-year-old random number generator flaw to recover private…
Entries by
BadRabbit Ransomware Attacks Hitting Russia, Ukraine
A ransomware attack called BadRabbit has put a halt to business inside a…
Latest Sofacy Campaign Targeting Security Researchers
Sofacy has been using a lure document connected to a cyber conflict conference…
Cloudy with a chance of transparency
(Image: ‘Cloudy with a Chance of Meatballs’ – Sony Pictures Animation) In my previous…
ROCA: Infineon TPM and Secure Element RSA Vulnerability Guidance
This page contains guidance for people who want to understand and reduce the…
Hackers Take Aim at SSH Keys in New Attacks
SSH private keys are being targeted by hackers who have stepped up the…
Cyber Security: Small Business Guide (PDF Version)
A summary of low cost, simple techniques that can improve cyber security within…
Automating UEFI Firmware Updates
In our previous blog post we talked about the state of UEFI firmware running on…
Oracle Patches 250 Bugs in Quarterly Critical Patch Update
Three critical SQL injections vulnerabilities in Oracle’s popular E-Business Suite make up a…
Factorization Flaw in TPM Chips Makes Attacks on RSA Private Keys Feasible
A flawed Infineon Technology chipset left HP, Lenovo and Microsoft devices open to…