February 15, 2023
-
-
The team has just published a video that shows them breaking into a device manufactured by OneKey, a Hong-Kong based firm that has raised $20 million in venture capital and that describes its product as an “open source wallet trusted by millions.”
Cyber firm cracks OneKey crypto wallets, raises broader questions of hardware security | Fortune Crypto
The vulnerability has been patched but the episode raises questions about crypto hardware wallets more broadly.
Chris Wysopal: "The team has just published a video that shows th…" - Infosec Exchange
The team has just published a video that shows them breaking into a device manufactured by OneKey, a Hong-Kong based firm that has raised $20 million in venture capital and that describes its product as an “open source wallet trusted by millions.” https://fortune.com/crypto/2023/02/09/cyber-firm-cracks-onekey-crypto-wallets-in-video-raises-questions-hardware-security/
-
Almost all of the public exploits for ManageEngine's CVE-2022-47966 rely on getRuntime().exec(). This behavior will get an attacker caught by any half-decent security solution. So I put together a blog that demonstrates how an attacker can exploit this vulnerability without getRuntime(), stay in memory, and evade current detections.
https://vulncheck.com/blog/cve-2022-47966-payload
https://infosec.exchange/@albinolobster/
-
A curated list of falsehoods programmers believe in
You won’t believe number 7!
GitHub - kdeldycke/awesome-falsehood: 😱 Falsehoods Programmers Believe in
😱 Falsehoods Programmers Believe in. Contribute to kdeldycke/awesome-falsehood development by creating an account on GitHub.
-
-
If you missed the between two nerds yesterday, you should really check it out.
And @tomatospy and @thegrugq are two of the leading public analysts on cyberwarfare tactics. I didn’t agree with everything they said but about 90% is dead on
Link here:
https://risky.biz/BTN19/-
This is an amazing story, about which I have some thoughts…
-
-
-
Fans banned from Europa Conference League match amid Moldovan fears of Russian coup
Clever idea actually. Use saboteurs disguised as football hooligans who then attack buildings and seize control under cover of a football game.
Sheriff Tiraspol vs Partizan Belgrade: Fans banned from Europa Conference League match amid Moldovan fears of Russian coup | The Independent
Russia has rejected claims of a plot to overthrow the Moldovan government
-
-
-
Apple splats zero-day bug, other gremlins in macOS, iOS
Not much info on this, but (1) WebKit type confusion gives RCE, (2) actively exploited in the wild, (3) credit appears to be given to Citizen Labs. Strongly suggests that some spyware vendor had to spend time and money integrating a replacement iOS 0day into their system.
https://www.theregister.com/2023/02/15/apple_patches_zeroday_vulnerability/-
Start the conversation: