Search: “Slides”

11 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 80 Malware 67 Industry 54 Exploit / PoC 34 Policy & legal 32 Ransomware 30 Data breach 22 Threat actor 20 Phishing & fraud 18 AI research 12 AI industry 11 Research 11 Model release 6 Tools 5

SeverityAll critical 89 high 86 medium 89 low 104 info 40

Retrospective by 'gpg.fail' authors

Authors of the gpg.fail GnuPG vulnerability set published a retrospective with talk recording, slides, and a repo PoC.

Sam James shares that the researchers behind the 'gpg.fail' set of GnuPG vulnerabilities have published a retrospective, including a talk recording and slides. The slides appear to mention an additional vulnerability not yet widely reviewed, and a proof-of-concept is available in their repository. This follows earlier discussion of the gpg.fail findings on oss-security.

oss-securityupdated 17:16 UTC · 1h agofirst Sep 13, 01:12 UTC · 3d agoResearch 8 sources1

Mailbox Insecurity

Schneier on SecurityDec 19, 15:24 UTC · Dec 19, 2024Research

US Scrambles to Investigate Military Intel Leak

Infosecurity MagazineApr 11, 10:50 UTC · Apr 11, 2023Research

Algeria Shut Down the Internet to Prevent Students from Cheating on Exams

Schneier on SecurityJan 27, 14:34 UTC · Jan 27, 2020Research

Testing race conditions with memory access tracing and stack-based delay injection

Google Project Zero released MAccConc, Linux kernel tooling that traces memory accesses to explore and test race condition interleavings.

A Google Project Zero researcher published MAccConc (Memory Access Concurrency), tooling for exploring possible interleavings of multithreaded test cases in the Linux kernel, available on GitHub. The tools use KCOV with ASAN outline-mode instrumentation to record per-access memory traces, enabling automatic testing of all A-B-A interleavings plus terminal and GUI explorers for manual analysis. The work targets confirming race condition candidates, building reliable regression tests, and enabling concurrency fuzzing, drawing on ideas from SKI and Ned Williamson's sockfuzzer.