Stories by 0x0

CloudPets teddy bears leaked and ransomed, exposing kids' voice messages

TicketBleed (CVE-2016-9244) (F5 BIG-IP)

Godaddy has issued at least 8850 SSL certificates without validating anything

Vim/neovim: Arbitrary command execution (CVE-2016-1248)

SQLite Release 3.15.0

GlobalSigned off

Spotify Free desktop users facing malware-filled ads

Capcom's Streetfighter rootkit capcom.sys signed by a still valid Symantec cert

Stealing Machine Learning Models via Prediction APIs

Apple keeps rejecting App Store apps with random words that are “private”

KCI Attacks against TLS (2015)

WoSign's secret purchase of StartCom: WoSign threatened legal actions

About Security Update 2016-001 El Capitan and Security Update 2016-005 Yosemite

Do you trust StartCom?

OpenSSL 1.1.0 released with support for Dual EC DRBG

Technical Analysis of Pegasus Spyware [pdf]

Apple Software Vulnerability Is Linked to Intrusions

404 to 301 Plugin Considered Harmful

Lenovo scrambling to get a fix for BiOS vuln – bug or backdoor?

“rootmydevice” sunxi kernel local root backdoor

1
2
3
4
5
6