Liveness attacks on GossipSub and DOG gossip protocols
Research shows adversaries can separate nodes from honest mesh using few nodes in P2P networks.
Stories per day · 30 days
2 RSS
Relatedauthentication-bypass2dahua2easy4ip2ip-cameras2cert-ua1cometbft1crystals-kyber1decentralized-systems1energy-trading1ethereum1filesharing1gossip-protocols1hedera1iot1iroh1key-agreement1liveness-attacks1post-quantum1
11 stories, newest first · one card per story
Stories tagged #p2p
CERT-UA: attackers control Dahua cameras and recorders via Easy4IP
Devices with Easy4IP dial out to Dahua’s cloud and can be opened by serial number without a public IP or open ports.
CERT-UA warns Dahua cameras in Ukraine hijacked via P2P and auth flaws
Attackers guess Easy4IP serial numbers and use weak passwords or CVE-2021-33044 and CVE-2021-33045 on outdated firmware.
1
Quantum-Resilient Secure Protocol for Decentralized Edge-IoT Peer-to-Peer Energy Trading Systems
Researchers propose a Kyber-based mutual authentication protocol for quantum-resilient edge-IoT energy trading.
Radicle: Disclosure of Vulnerability in the Network Protocol
Radicle disclosed unencrypted node traffic and broken peer authentication affecting every released version.
Radicle: Disclosure of Vulnerability in the Network Protocol
Radicle discloses critical protocol flaws allowing network eavesdropping and impersonation, compromising all private repositories in transit.
1
Hopper: Bounded-Memory Collaborative Debiasing for Byzantine-Tolerant Peer Sampling
Researchers propose Hopper, a bounded-memory debiasing protocol that protects Byzantine-tolerant peer sampling from delayed balanced attacks defeating cumulative counters.
International Operation Disrupts Sality P2P Botnet
US-led international operation with Europol, CrowdStrike, and Shadowserver sinkholed the 20-year-old Sality P2P botnet, once exceeding one million infected machines.
1
Dogged Russia-based botnet dismantled after 23-year run
Law enforcement, CrowdStrike and Shadowserver dismantled the 23-year-old Sality P2P botnet that infected more than 11 million devices.
1
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
US and European authorities with CrowdStrike dismantled the two-decade-old Sality P2P botnet using peer-list manipulation, blocking payload delivery to infected hosts.
3
ExfilSquad Targets New Victims, Shares Data via Torrents
Extortion group ExfilSquad lists 13 new US, UK and Swedish victims and now distributes stolen data via peer-to-peer torrents.