article thumbnail

Weekly Update 128

Troy Hunt

I'll be there doing a workshops and talks) I loaded the Dubsmash data breach into HIBP (also just pushed the button on ShareThis) Varonis is sponsoring my blog this week (more from them on their DFIR team investigating a cyberattack).

Firmware 186
article thumbnail

Weekly Update 175

Troy Hunt

I was left with a zero-byte file on my unit which we tried to recover to no avail.

Firmware 222
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

IoT Unravelled Part 3: Security

Troy Hunt

I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Let's got through the options: Firmware Patching I'll start with the devices themselves and pose a question to you: can you remember the last time you patched the firmware in your light globes? Or vibrator.

IoT 358
article thumbnail

Toward Quantum Resilient Security Keys

Google Security

Elie Bursztein, cybersecurity and AI research director, Fabian Kaczmarczyck, software engineer As part of our effort to deploy quantum resistant cryptography, we are happy to announce the release of the first quantum resilient FIDO2 security key implementation as part of OpenSK, our open source security key firmware.

article thumbnail

The Cybersecurity Executive Order: the first 120 days

Security Boulevard

On June 2 and 3, 2021, the National Institute of Standard and Technology (NIST) held a workshop where it consulted with federal agencies, the private sector, academics, and other stakeholders to start working on a definition of Critical Software. Critical Software Definition. The definition of EO-critical software.

article thumbnail

Sounding the Alarm on Emergency Alert System Flaws

Krebs on Security

The DHS warning came in advance of a workshop to be held this weekend at the DEFCON security conference in Las Vegas, where a security researcher is slated to demonstrate multiple weaknesses in the nationwide alert system. .”

Firmware 201
article thumbnail

IoT Secure Development Guide

Pen Test Partners

There is no concrete method to follow as it will rely on contents of the decomposed design from Step 2, but typical examples might include the following: Intellectual property in the device firmware. Deploy malicious firmware. Mind maps can be a good way to collaboratively develop this phase within a threat modelling workshop.

IoT 52