Law #1: Nobody believes anything bad can happen to them, until it does
Law #2: Security only works if the secure way also happens to be the easy way
Law #3: If you don't keep up with security fixes, your network won't be yours for long
Law #4: It doesn't do much good to install… pic.twitter.com/yp7r0bi6vR

— mRr3b00t (@UK_Daniel_Card) October 8, 2024

Immutable Laws of Security v2

Law #1: If a bad actor can persuade you to run their program on your computer, it's not solely your computer anymore.
Law #2: If a bad actor can alter the operating system on your computer, it's not your computer anymore.
Law #3: If a bad actor has… pic.twitter.com/tUMq53TkoF

— mRr3b00t (@UK_Daniel_Card) October 9, 2024

Discovered in our CWI library: the proceedings of Crypto'82 (which are still behind a Springer paywall). With a nice picture on the backside: pic.twitter.com/Sn0K07Ig8n

— Marc Stevens (@realhashbreaker) October 8, 2024

pic.twitter.com/vn89w0PXEQ

— Sabnock★彡 (@Sabnock66) October 8, 2024

SIMurai is software that emulates a SIM card, which helps in fuzzing modem firmware for vulnerabilities or testing SIM spyware. 🚗📡🔨

Connected cars included :)

Research Paper: https://t.co/2n3tWRXaYo
Presentation: https://t.co/OEE5M9ICFs
Source code: https://t.co/ljOesFsk2y pic.twitter.com/VdtI6LRjMR

— Denis Laskov 🇮🇱 (@it4sec) October 8, 2024

If you have an .io domain you should read this.

When the British government announced last week that it was transferring sovereignty of an island in the Indian Ocean to the country of Mauritius, Gareth immediately realized its online implications: the end of the .io domain…

— Weld Pond | Chris Wysopal (@WeldPond) October 8, 2024

QR codes that lead to a fraudulent payment site discovered at parking lot in San Francisco Fisherman’s Wharf. pic.twitter.com/IeoFPw12Z8

— Weld Pond | Chris Wysopal (@WeldPond) October 9, 2024