Security News

Little FYI: Wi-Fi calling services on AT&T, T-Mobile US, Verizon are insecure, say boffins
2018-11-30 14:03

Subscribers using wireless calls wide open to attack Boffins from Michigan State University in the US and National Chiao Tung University in Taiwan have found that the Wi-Fi calling services...

Solid state of fear: Euro boffins bust open SSD, Bitlocker encryption (it's really, really dumb)
2018-11-05 21:18

Security experts frantically facepalming at stupid design Fundamental flaws in the encryption system used by popular solid-state drives (SSDs) can be exploited by miscreants to easily decrypt...

Google and Microsoft boffins playing nicely together to stop replay attacks in their tracks
2018-10-10 09:03

Internet Engineering Task Force doc examines how to better protect authentication tokens Google and Microsoft engineers have pooled their efforts to propose a protection against what are known as...

Boffins bypass password protection with pilfering by phony programs
2018-09-26 23:59

Google Instant Apps still needs a lot of work on security Password managers on mobile devices can be tricked by imposter apps into handing over a user's passwords.…

Boffins don't want to burst your bubble – they create them with sound
2018-09-12 07:01

Nerd out over bizarre ultrasonic fluid dynamics Video Fluid dynamics is weird. Physicists have reverse engineered the popping of a bubble and managed to keep it levitated just by using the power of sound.…

Using just a laptop, boffins sniff, spoof and pry – without busting browser padlock
2018-09-06 10:01

Researchers break certificate authorities' domain validation Researchers based in Germany have discovered how to spoof certificates they don't own – even if the certs are protected by the...

Boffins trying to build a open source secure enclave on RISC-V
2018-08-31 23:57

Open source trusted execution component expected this fall At some point this fall, a team of researchers from MIT's CSAIL and UC Berkeley's EECS aim to deliver an initial version of an open...

Boffins bork motion control gear the power of applied sound
2018-08-28 06:00

Researchers manipulate gyroscopic controls with ultrasonic attack A group of university researchers have developed a way to remotely control motion-sensing devices using only sound waves.…

How's that encryption coming, buddy? DNS requests routinely spied on, boffins claim
2018-08-20 07:03

Uninvited middlemen may be messing with message Most people's DNS queries – by which browsers and other software resolve domain names into IP addresses – remain unprotected while flowing over the...

Cisco patches IOS in response to boffins' IKE-busting breakthrough
2018-08-14 06:02

Switchzilla issues update for authentication bypass flaw Cisco has pushed out an update for its internetwork operating system (IOS) and IOS XE firmware in advance of a Usenix presentation on...