#encryptionvulnerability

‘Black Basta Buster’ Exploits Ransomware Bug for File Recovery

by

January 3, 2024 at 11:51AM SRLabs released the Black Basta Buster tool to decrypt files encrypted by a specific strain of the Black Basta ransomware, with limitations on encryption logic and file size. The decryptor can recover files between 5,000 bytes and 1GB, but larger files may lose the first 5,000 bytes. It exploits a … Read more

SSH shaken, not stirred by Terrapin vulnerability

by

December 20, 2023 at 03:44AM The SSH protocol vulnerability, dubbed the Terrapin Attack, can be exploited in man-in-the-middle attacks to weaken SSH security. By injecting messages during the handshake and blocking certain messages, attackers can downgrade security, potentially compromising user credentials. Mitigations include software updates and disabling vulnerable encryption modes. Details were disclosed by computer … Read more