July 4, 2024 at 02:01AM Brain Cipher, the group behind the hacking of Indonesia’s Temporary National Data Center, has apologized and released an encryption key to the government. The key was a 54 kb ESXi file, with its effectiveness yet to be confirmed. The group shared its motive, claiming to act as penetration testers and … Read more
April 11, 2024 at 06:12AM Google announced new security features for its cloud customers, including AI capabilities and Chrome Enterprise Premium. Key additions include Gemini for Google Cloud, providing AI-powered assistance, assisted investigation, conversational search, and more. Other features include AI recommendations for IAM posture, encryption key creation, and confidential computing protections. Chrome Enterprise Premium … Read more
January 11, 2024 at 02:41PM Bitwarden password manager now allows users to log into their web vaults using passkeys, a more secure and phishing-resistant alternative to traditional passwords. The implementation relies on the PRF WebAuthn extension for encryption and decryption. Users can register passkeys using a hardware security key, increasing security without sacrificing convenience. The … Read more
November 29, 2023 at 09:54AM EURECOM’s Daniele Antonioli uncovered BLUFFS attacks that break Bluetooth’s secrecy by imitating devices and enabling MitM attacks. These exploits affect Bluetooth’s session key derivation across most devices. Antonioli proposed a solution and a toolkit to demonstrate the vulnerabilities, which major tech companies are addressing. Meeting Takeaways: 1. Professor Daniele Antonioli … Read more