TechLetters #186 Global and huge Windows vulnerability. Post-quantum cryptography. Hacking a bicycle.
Security
Critical security vulnerability in Windows operating system. Remote code execution using crafted IPv6 packets. That's right, it suffices to send network packets to own a system.
NIST publishes standards for next-generation cryptography. Cipher, digital signature. Cryptography understood as resistant to attacks with future quantum computers. Migration will not be a piece of cake, but there’s time. https://nvlpubs.nist.gov/nistpubs/fips/nist.fips.203.pdf https://nvlpubs.nist.gov/nistpubs/fips/nist.fips.204.pdf https://nvlpubs.nist.gov/nistpubs/fips/nist.fips.204.pdf
Cybercriminals infected farm system controlling the automatic milking machine with ransomware. The system failed to inform the farmer of a problem with the cow's health. Unfortunately, a cow and her calf died. Losses: €6400 (less than the demanded ransom) https://www.agrarheute.com/tier/rind/cyberkriminelle-erpressen-landwirt-hacken-melkroboter-kuh-stirbt-624499?ref=news.risky.biz
New block cipher and mode of operation introduced by researchers from U.S. National Security Agency. For encryption of RAM memory to defend from cold boot attacks. Safe from quantum attacks. https://eprint.iacr.org/2024/1240.pdf
Hacking a bicycle these days. Actually - the derailleurs on a bike! Security bug of Shimano's (wireless) derailleurs. They can be manipulated remotely, e.g. switch from a high gear immediately to the low gear. https://www.usenix.org/system/files/woot24-motallebighomi.pdf
“Generative AI-powered tactics provide only incremental productivity and content-generation gains to the threat actors, and have not impeded ability to disrupt their influence operations”. AI used in an information operation saying that the French drink too much alcohol because of Macron’s support of Ukraine... You don’t need AI to know that the true reason is very different to that. https://z-p3-scontent.fpoz6-1.fna.fbcdn.net/v/t39.8562-6/455158590_1227906161699704_7318728570685925077_n.pdf
In case you feel it's worth it to forward this content further:
Subscribed
If you’d like to share: