About the security content of iOS 16.3.1 and iPadOS 16.3.1 by mcbain

This document describes the security content of iOS 16.3.1 and iPadOS 16.3.1. About Apple security updates For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference vulnerabilities by CVE-ID when possible. For more

ByHackTechFebruary 14, 20230Comments

News

OpenSSL Security Advisory by yabones

OpenSSL openssl at openssl.org Tue Feb 7 16:32:29 UTC 2023 Previous message (by thread): OpenSSL version 3.0.8 published Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] —–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 OpenSSL Security Advisory [7th February 2023] ============================================= X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) =================================================================

ByHackTechFebruary 7, 20230Comments

News

Social Security Administration Redesign by toomuchtodo

Social Security Administration Redesign

ByHackTechJanuary 20, 20230Comments

News

TSA now wants to scan your face at security by mysterypie

Next time you’re at airport security, get ready to look straight into a camera. The TSA wants to analyze your face.The Transportation Security Administration has been quietly testing controversial facial recognition technology for passenger screening at 16 major domestic airports — from Washington to Los Angeles — and hopes to expand it across the United…

ByHackTechDecember 5, 20220Comments

News

Food Security and the Coming Storm by rntn

Executive summary Over the last three months, Russia’s invasion of Ukraine has shocked agricultural markets, bringing the problems of high food inflation and rising global hunger starkly into relief. Prior to the war, levels of hunger had already surpassed all previous records in 2021, with close to 193 million people acutely food insecure and in…

ByHackTechMay 29, 20220Comments

News

AWS Security Maturity Model by kiyanwang

AWS Security Maturity Model

ByHackTechMay 22, 20220Comments

News

Security Issues with ODoH by zeepzeep

Hi, Disclaimer: I was told by Cloudflare after reporting this to them at https://hackerone.com/cloudflare to also report this publicly in this project. Report ID: #1544311 (Not disclosed yet) You can also file an issue on Github for this project. Background information I’ve been doing some research around ODoH (Oblivious DNS Over HTTPS) and I’ve identified…

ByHackTechApril 22, 20220Comments

News

AWS Fargate security overview whitepaper [pdf] by WatchDog

VÞm¸>ÜIß¦1ðè.%ù -è«¯]» çÓ·ÓgûXù80~0_ÓÛÛèù{èÈ´c6.¥u Z3D· Ñaº»Á¢ì£ã7ÑK÷Ñ{³t¬Ð±§¡ñT O»s9@+Ê³á>ÏøiÓ2údÏdF³ >w~ _’Ø_®ªÒÑÕôæ:½·5ß ûþqúh7½²v_CýiV¾YÅ¯]ôª=ººd[tí0¯¢W7Ò;èÌAF®ûâ16//¬g¥ÙGJyÉe¿}û³µ¢ endstream endobj 10 0 obj > stream x½{LaÇçÎqrJáv$rÙ,¬S¡þ@äÎ2×6¹l4¹þÀ2·¹¬°aË¥YQÈ:açNuÎyß÷ùz·FMùýó¼Ï÷ý¼Ïïy¾Ï÷%ÒXÎ~YEv4é»R|H?{×æÎ|¤°ôýH¾§T³âôBê/C-Ç Ò¼4k!ïÁVÛÚHíÜL¾XÔõÉËôý”öÔ¢>ÖBË5Ûà?ÜDQ·2Ï±m~ªò>}Lê,§0’pn5*åwf”Óg2vKA&µ¨þ NòDçq¼ÚI Ì I^®mI®[¨Y×]ÂEÒíGU0µ³{c{fA}}@uÆ(ßßô7uîZ{>ãÒ7â6MªÃ4*Þù*cU%%å.ÞR£´ïlMöÄ§®â5ê øÆ²ÌíÛûO×áòË) ÊJÕ[ ½yÂe4~GEh¡Êadwïk|Ù_»sÀÁÔõÞrË¯¥¸QSÜh®aÅoS´¹hèÂ×ÿÆ¼cb%ðÀËçàQr¸Ó½N·¿ÈDbGn§f°¯¼ÛÏo_ÃÍç% Mdâ+P(nh½§¸àÎGQ+úds»àÍé5µö¾ÈN¸î>úß,¨çMñ)[Öt¿¦Qc§ÇÇ©]d z°¨øhQÍÀø¸&ÇÆ$¬Éo¥ÿP6r¾=#ç¥¥ÄX2·åí¸ëße¯uí³hÿÉwº¹nvÒºHöÊ¬}zt (“êòuß?6Ôsg]¡6»E³ oÊ³«¢ÿ~]Äy?Ø=>¯Æ&Mð7 »¾åÏêí×ê%!+5©&ðå^@³n;Y!RöµàâÁ-«Í3qê¶#9/BJöàÐÂê±¿2¬yß^äõx%¥y&=fQ»ÜÊIãøCì.´,ÅYvkûpfÀü§ñÚÀ¾1öæ¾ªöîO·L°Zð>û±¿ endstream endobj 11 0 obj > endobj 12 0 obj [ 13 0 R] endobj 13 0 obj > endobj 14 0 obj > endobj 15 0 obj >…

ByHackTechApril 20, 20220Comments

News

Understanding the Web Security Model, Part IV: Cross-Origin Resource Sharing by tomwas54

Posted by ekr on 19 Apr 2022 This is part IV of my series on the Web security model (parts I, II, outtake, III). In this post, I cover cross-origin resource sharing (CORS), a mechanism for reading data from a different site. As discussed in part III, the Web security model allows sites to import…

ByHackTechApril 19, 20220Comments

News

Security alert: Attack campaign involving stolen OAuth user tokens issued to tw by todsacerdoti

On April 12, GitHub Security began an investigation that uncovered evidence that an attacker abused stolen OAuth user tokens issued to two third-party OAuth integrators, Heroku and Travis-CI, to download data from dozens of organizations, including npm. The applications maintained by these integrators were used by GitHub users, including GitHub itself. We do not believe…

ByHackTechApril 15, 20220Comments

Sign Up to Our Newsletter