I’m working on some software that can be self-hosted, and it includes a component that can be downloaded and installed on end user machines (Windows only). The download comes from the self-hosted server, not from a central location, and th…
This blog post outlines the work that Microsoft is doing to eliminate uninitialized kernel pool memory vulnerabilities from Windows and why we’re on this path.
For a background on why uninitialized memory matters and what options have been used in the …
I have a "cloud service", which consists of 2 parts:
Web application, written in Next.js;
MongoDB database (uses MongoDB Atlas).
I allow users to sign in with GitHub and handle authentication using JWT. User can create & de…
A previously asked question touches on topics which are very similar to what I am having trouble understanding.
In a web application I am testing, SAML SSO is brokered using Keycloak. The SAML Response messages contain Encrypted Assertions…
OpenVPN recommends using a 2048 RSA key size for greater security, however, the hardware I’m using is somewhat weak and defaults to using a 1024 RSA key size. I’m trying to determine if it’s worth the hassle of manually changing things to…
Type: Threat AnalysisBRONZE VINEWOOD Uses HanaLoader to Target Government Supply ChainIn mid-2018, Secureworks® Counter Threat Unit™ (CTU) researchers identified targeted intrusion activity linked to BRONZE VINEWOOD (also known as APT31).
Type: Threat AnalysisDropboxAES Remote Access TrojanDropboxAES is a simple remote access trojan (RAT) used by the BRONZE VINEWOOD (also known as APT31) threat group. The RAT uses the Dropbox file-sharing service for its command and control (C2) communi…
Type: Threat AnalysisBRONZE VINEWOOD Targets Supply ChainsBRONZE VINEWOOD (also known as APT31 and ZIRCONIUM) is a targeted threat group that has been active since at least June 2016. There has been limited public information about the group, other tha…
If I delete photos which are stored in iCloud from my phone. (Which is also linked to my iPad)
I know the data is then made ‘free space’ but is still on the phone In some format.
If I delete it from my phone, it’ll also delete from my iPad…
I haven’t seen any seen mechanism by which UEFI can detect the most recent update to a binary from being swapped out for an older binary that was signed with the same key as the up-to-date binary. Google’s vboot is the only PC firmware I k…
