March 2019 – Security

Transgender Day of Visibility

March 31, 2019 by Kas Perch

Kas Perch

The transgender pride flagMy name is Kas. I’m a Cloudflare employee and I wanted to share my story with you on International Transgender Day of Visibility.I've been different for as long as I can remember. I've been the odd one out not just for the time I've spent in tech,…

Annual Protest Raises $250K to Cure Krebs

March 31, 2019 by BrianKrebs

BrianKrebs

For the second year in a row, denizens of a large German-language online forum have donated more than USD $250,000 to cancer research organizations in protest of a story KrebsOnSecurity published in 2018 that unmasked the creators of Coinhive, a now-defunct cryptocurrency mining service that was massively abused by cybercriminals.…

Man Behind Fatal ‘Swatting’ Gets 20 Years

March 29, 2019 by BrianKrebs

BrianKrebs

Tyler Barriss, a 26-year-old California man who admitted making a phony emergency call to police in late 2017 that led to the shooting death of an innocent Kansas resident, has been sentenced to 20 years in federal prison. Tyler Barriss, in an undated selfie. Barriss has admitted to his role…

A Month After 2 Million Customer Cards Sold Online, Buca di Beppo Parent Admits Breach

March 29, 2019 by BrianKrebs

BrianKrebs

On Feb. 21, 2019, KrebsOnSecurity contacted Italian restaurant chain Buca di Beppo after discovering strong evidence that two million credit and debit card numbers belonging to the company’s customers were being sold in the cybercrime underground. Today, Buca’s parent firm announced it had remediated a 10-month breach of its payment…

Android Security & Privacy Year in Review 2018: Keeping two billion users, and their data, safe and sound

March 29, 2019March 29, 2019 by Eugene Liderman

Eugene Liderman

Posted by Meghan Kelly, Android Security & Privacy Team We're excited to release today the 2018 Android Security and Privacy Year in Review. This year's report highlights the advancements we made in Android throughout the year, and how we've worked to keep the overall ecosystem secure. Our goal is to…

Peculiar PHP Present In Popular Pipdig Power Pack (P3) Plugin

March 29, 2019 by Mikey Veenstra

Mikey Veenstra

This week, our team was notified of suspicious code present in a plugin offered alongside themes sold by Pipdig, a UK-based web development team. The user, who wishes to remain anonymous, reached out to us with concerns that the plugin’s developer can grant themselves administrative access to sites using the…

Scanning for Padding Oracles

March 29, 2019July 3, 2019 by ic0ns

ic0ns

As you might have heard, we recently got our paper on padding oracle attacks accepted to the USENIX Security Conference. In this paper, we describe and evaluate a scanning methodology with which we found several padding oracle vulnerabilities in devices from various vendors. In total, we found that 1.83% of…

Android for Hackers: How to Backdoor Windows 10 Using an Android Phone & USB Rubber Ducky

March 29, 2019 by tokyoneon

tokyoneon

With an inconspicuous Android phone and USB flash drive, an attacker can compromise a Windows 10 computer in less than 15 seconds. Once a root shell has been established, long-term persistence to the backdoor can be configured with just two simple commands — all while bypassing antivirus software and Windows…

Thoughts on OSSEC Con 2019

March 28, 2019March 28, 2019 by Richard Bejtlich

Richard Bejtlich

Last week I attended my first OSSEC conference. I first blogged about OSSEC in 2007, and wrote other posts about it in the following years.OSSEC is a host-based intrusion detection and log analysis system with correlation and active response features. It is cross-platform, such that I can run it on…

🤠 The Wrangler CLI: Deploying Rust with WASM on Cloudflare Workers

March 28, 2019 by Ashley Williams

Ashley Williams

Wrangler is a CLI tool for building Rust WebAssembly Workers Today, we're open sourcing and announcing wrangler, a CLI tool for building, previewing, and publishing Rust and WebAssembly Cloudflare Workers. If that sounds like some word salad to you, that's a reasonable reaction. All three of the technologies involved are…

How to Compromise a Web Server & Upload Files to Check for Privilege Escalation, Part 1

March 28, 2019 by drd_

drd_

Information gathering is one of the most important steps in pentesting or hacking, and it can often be more rewarding to run things on the target itself as opposed to just running scripts against it remotely. With an SQL injection, a hacker can compromise a server and, ultimately, upload and…

When I Knew Cloudflare Was the Right Place For Me

March 27, 2019March 28, 2019 by Ellie Jamison

Ellie Jamison

Let’s be honest, interviewing for a new job can be a long, difficult process. Not only is it emotionally draining to handle multiple rejections, slow responses, and prolonged processes, it can be physically exhausting to sit through hours of stale interviews. A former colleague of mine compared interviewing to navigating…

Audit of CashShuffle

March 27, 2019 by Yolan Romailler

Yolan Romailler

CashShuffle is a plugin for the ElectronCash Bitcoin wallet software. CashShuffle implements a superset of the CoinShuffle protocol, whose aim is to anonymize cryptocurrency ownershipContinue reading

BoringTun, a userspace WireGuard implementation in Rust

March 27, 2019 by Vlad Krasnov

Vlad Krasnov

Today we are happy to release the source code of a project we’ve been working on for the past few months. It is called BoringTun, and is a userspace implementation of the WireGuard® protocol written in Rust. A Bit About WireGuard WireGuard is relatively new project that attempts to replace…

Podcast Episode 4: The Aaron Campbell Interview and the Social Warfare Saga

March 26, 2019 by Kathy Zant

Kathy Zant

This week we have an update on the Social Warfare plugin vulnerability, how it was more serious than originally thought, and a feud that has broken out between a security researcher and forum moderators. We also have some interesting data on how WordPress will become more secure soon with code…

1 2 3 … 6 Next »