Jan 16, 2023
Supply Chain Attack Using Identical PyPI Packages, “colorslib”, “httpslib”, and “libhttps”
Supply Chain Attack Using Identical PyPI Packages, “colorslib”, “httpslib”, and “libhttps” | FortiGuard Labs
The FortiGuard Labs team discovered an attack embedded in three PyPI packages called ‘colorslib’, ‘httpslib’, and “libhttps”. Read our blog to learn more.…
-
-
Right behind German defense minister Lambrecht we can see the brand new secure telephone SINA Communicator H:
Verteidigungsministerium @BMVg_Bundeswehr
-
This is an attack vector that @lordx64, @Cryptilt and I have been talking about since 2021. 🤷♂️ https://t.co/FbY7238tQf
whalechart.org @WhaleChart
-
Given that the invention of attack trees is commonly attributed to Schneier's 1999 article, I was surprised to see the idea described in a 1991 paper by J.D. Weiss of Bell Labs [1].
Even more surprising is that I found it because it was cited in another paper co-authored by Schneier in 1998 [2].
[1]J.D. Weiss, "A System Security Engineering Process," Proceedings of the 14th National
Computer Security Conference, 1991.
https://csrc.nist.gov/CSRC/media/Publications/conference-paper/1991/10/01/proceedings-14th-national-computer-security-conference-1991/documents/1991-14th-NCSC-proceedings-vol-2.pdf[2] Chris Salter, O. Sami Saydjari, Bruce Schneier, Jim Wallner, "Toward a secure system engineering methodology," NSPW '98: Proceedings of the 1998 workshop on New security paradigms
https://dl.acm.org/doi/10.1145/310889.310900
Alex Gantman: "Given that the invention of attack trees is commo…" - IOC.exchange
Attached: 1 image Given that the invention of attack trees is commonly attributed to Schneier's 1999 article, I was surprised to see the idea described in a 1991 paper by J.D. Weiss of Bell Labs [1]. Even more surprising is that I found it because it was cited in another paper co-authored by Schneier in 1998 [2]. [1]J.D. Weiss, "A System Security Engineering Process," Proceedings of the 14th National Computer Security Conference, 1991. https://csrc.nist.gov/CSRC/media/Publications/conference-paper/1991/10/01/proceedings-14th-national-computer-security-conference-1991/documents/1991-14th-NCSC-proceedings-vol-2.pdf [2] Chris Salter, O. Sami Saydjari, Bruce Schneier, Jim Wallner, "Toward a secure system engineering methodology," NSPW '98: Proceedings of the 1998 workshop on New security paradigms https://dl.acm.org/doi/10.1145/310889.310900
-
-
(apologies to xkcd.com/1420/)
An arrow points to the empty area, with caption: "Brief, glorious period in which Tweetbot was usable"" loading="lazy">
-
Guccifer is out of prison and giving interviews. I wouldn’t wish American prison on my worst enemy.
Hacker Guccifer Launched Clinton Email Scandal Out of Prison
Before Russian intelligence cribbed his handle, Marcel Lehel Lazar hacked celebrities and Sidney Blumenthal. Now he’s back home in Transylvania.
-
Let’s assume two neighbouring ape groups, 1 fishes for termites, while 2 dips for ants. This is ape culture.
In the graphic you see six ape groups’ cultures.
You might NOT have actually seen this graphic before. The graphic is from our recent paper: nature.com/articles/s4159… 1/n
-
🧵1 @glitchnsec and I wanted to say thanks to the people whose CVE discoveries, vulnerability write-ups, and PoCs we used to create the material for #OST2 ost2.fyi/Vulns1001. So thanks go out to the following contributors…
-
holdsecurity.com/news/2023/01/s…
Motive aside, this is still a very dodgy approach to take.
