Posted inBiz & IT confidentiality group messages
WhatsApp provides no cryptographic management for group messages
The flow of adding new members to a WhatsApp group message is: A group member…
Posted inabductions crime crypto
We have reached the “severed fingers and abductions” stage of the crypto revolution
French gendarmes have been busy policing crypto crimes, but these aren't the usual financial schemes,…
Posted inAI bug reports curl
Open source project curl is sick of users submitting “AI slop” vulnerabilities
Alex Rice, co-founder, CTO, and CISO of HackerOne, said in a statement to Ars that…
Jury orders NSO to pay $167 million for hacking WhatsApp users
A jury has awarded WhatsApp $167 million in punitive damages in a case the company…
Posted inAI Biz & IT guilty plea
Man pleads guilty to using malicious AI software to hack Disney employee
A California man has pleaded guilty to hacking an employee of The Walt Disney Company…
Posted inBiz & IT mike waltz Security
Signal clone used by Trump official stops operations after report it was hacked
Waltz was removed from his post late last week, with Trump nominating him to serve…
Hundreds of e-commerce sites hacked in supply-chain attack
Hundreds of e-commerce sites, at least one owned by a large multinational company, were backdoored…
Posted inaccount takeovers Biz & IT passkeys
Microsoft’s new “passwordless by default” is great but comes at a cost
Microsoft says it’s making passwordless logins the default means for signing in to new accounts,…
Posted inBiz & IT mfa multi factor authentication
Why MFA is getting easer to bypass and what to do about it
These sorts of adversary-in-the-middle attacks have grown increasingly common. In 2022, for instance, a single…
Posted inBiz & IT passwords Remote Desktop Protocol
Windows RDP lets you log in using revoked passwords. Microsoft is OK with that.
The ability to use a revoked password to log in through RDP occurs when a…