Article
DHS Cybersecurity Reportedly Has an ‘I’m Sure It’s Nothing’ Problem
Dismissed a valid alert about a cybersecurity breach once? Shame on the intruder. Dismissed a valid alert about a cybersecurity…
Security Research
Security Research
Post-Quantum Cryptography Implementations Found Vulnerable to Side-Channel Attacks
Researchers at ETH Zurich have demonstrated a practical attack against post-quantum cryptographic algorithms currently being standardized by NIST, raising concerns about the timeline for transitioning critical infrastructure to quantum-resistant encryption. The attack exploits implementation flaws rather than mathematical weaknesses in…
Security Research
VoltLeech Side-Channel Attack Can Extract Encryption Keys From Cloud Servers Remotely
Researchers at MIT and Stanford University have discovered a novel class of side-channel attacks that can extract cryptographic keys from…
Security Research
University Researchers Advance Post-Quantum Cryptography Standardization Efforts
University research groups have played a central role in the development and evaluation of post-quantum cryptographic algorithms as the National…
Security Research
MITRE ATT&CK Framework Updates Enhance Threat Modeling Capabilities for Defenders
The MITRE ATT&CK framework has received significant updates that expand its coverage of adversary tactics, techniques, and procedures, providing security…
Security Research
Google Project Zero Researchers Discover and Help Patch Critical WebP Vulnerability
In September 2023, Google Project Zero researchers identified CVE-2023-4863, a critical heap buffer overflow vulnerability in the widely used libwebp…
Security Research
How Bug Bounty Programs at Major Tech Companies Are Strengthening Software Security
Bug bounty programs have evolved from experimental initiatives into cornerstone elements of corporate security strategy. Companies including Google, Microsoft, Apple,…
Security Research
MIT Researchers Develop New Side-Channel Attack Defense for Modern Processors
Researchers at the Massachusetts Institute of Technology have developed a novel hardware defense mechanism designed to protect modern processors against…
Security Research
The Evolution of Fuzzing Techniques and Their Impact on Open-Source Security
Fuzzing, the automated process of feeding random or semi-random inputs to software to discover bugs, has undergone a remarkable transformation…