Security News

Google and Microsoft boffins playing nicely together to stop replay attacks in their tracks
2018-10-10 09:03

Internet Engineering Task Force doc examines how to better protect authentication tokens Google and Microsoft engineers have pooled their efforts to propose a protection against what are known as...

Boffins bypass password protection with pilfering by phony programs
2018-09-26 23:59

Google Instant Apps still needs a lot of work on security Password managers on mobile devices can be tricked by imposter apps into handing over a user's passwords.…

Boffins don't want to burst your bubble – they create them with sound
2018-09-12 07:01

Nerd out over bizarre ultrasonic fluid dynamics Video Fluid dynamics is weird. Physicists have reverse engineered the popping of a bubble and managed to keep it levitated just by using the power of sound.…

Using just a laptop, boffins sniff, spoof and pry – without busting browser padlock
2018-09-06 10:01

Researchers break certificate authorities' domain validation Researchers based in Germany have discovered how to spoof certificates they don't own – even if the certs are protected by the...

Boffins trying to build a open source secure enclave on RISC-V
2018-08-31 23:57

Open source trusted execution component expected this fall At some point this fall, a team of researchers from MIT's CSAIL and UC Berkeley's EECS aim to deliver an initial version of an open...

Boffins bork motion control gear the power of applied sound
2018-08-28 06:00

Researchers manipulate gyroscopic controls with ultrasonic attack A group of university researchers have developed a way to remotely control motion-sensing devices using only sound waves.…

How's that encryption coming, buddy? DNS requests routinely spied on, boffins claim
2018-08-20 07:03

Uninvited middlemen may be messing with message Most people's DNS queries – by which browsers and other software resolve domain names into IP addresses – remain unprotected while flowing over the...

Cisco patches IOS in response to boffins' IKE-busting breakthrough
2018-08-14 06:02

Switchzilla issues update for authentication bypass flaw Cisco has pushed out an update for its internetwork operating system (IOS) and IOS XE firmware in advance of a Usenix presentation on...

UK cyber security boffins dispense Ubuntu 18.04 wisdom
2018-08-01 09:24

GCHQ: Yeah, but maybe don't make it too secure, ok? The UK’s National Cyber Security Centre (NCSC) has dispensed advice aimed at securing Ubuntu installs and followed it up with help for Dixons customers.…

Boffins: Mixed-signal silicon can SCREAM your secrets to all
2018-07-27 01:01

'Screaming Channels', a side-channel baked into off-the-shelf Wi-Fi, Bluetooth silicon Side-channel radio attacks just got a whole lot worse: a group of researchers from Eurocom's Software and...