Stories by cws

CISA: AMI MegaRAC bug enabling server hijacks exploited in attacks

OpenBMC Security in Practice: Vulnerabilities, Variants, and AMI MegaRAC OneTree [pdf]

Skittle Factory Dementia Monkey Titty Monetization

BMC&C Part 3: New AMI MegaRAC Baseboard Management Controller Vulnerabilities

Text to CAD Public Alpha

We need to take satellite ground station security seriously

Measuring the Persuasiveness of Language Models

2024 Verizon Data Breach Investigation Report [pdf]

National Renewable Energy Lab Releases First Clean Energy Cybersecurity Report

A Technical Analysis of How Spring4Shell (CVE-2022-22965) Works

Analyzing SolarWinds Orion Sunburst DNS Traffic for Threat Intelligence

New Critical RCE Vulnerability in Drupal Core

See What Zoom Participants Are Typing by Watching Their Shoulder Movements

The HD Video Feedback Kinetic Sculpture

What is DNS tunneling and how do you prevent it?

How to Respond to Citrix ADC Vulnerability (CVE-2019-19781)

We busted a fake Chrome extension that was trying to steal data