DeadLock Ransomware: Technical Analysis
DeadLock ransomware uses hybrid cryptography (Curve25519 and XChaCha20), selective encryption, and geofencing. It employs an HTML-based recovery chat that interacts with Polygon…
Tag: Cryptography
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Accidental Exposure in Private Repo
Mozilla has revoked the cryptographic signing key used for Firefox and Thunderbird downloads on Linux after an unencrypted copy of the key…
CryptoJS: JavaScript Cryptography Library
A widely used JavaScript library with a critical weak RNG flaw in versions below 4.0.0, affecting cryptocurrency wallet recovery phrase generation.
crypto-js npm Package
crypto-js is a legitimate npm package for cryptographic functions. typo-crypto was designed to impersonate crypto-js through typosquatting.
GitHub ‘Verified’ Commits Can Be Rewritten Into New Hashes Without Breaking Signatures
New research from Carnegie Mellon University PhD student Jacob Ginesin, also a cryptographic auditor at Cure53, reveals that GitHub's 'Verified' commit badge…
Cure53: Cybersecurity Audit and Penetration Testing Firm
Cure53 is a Berlin-based cybersecurity firm specializing in penetration testing and security audits. Jacob Ginesin, a cryptographic auditor at Cure53, conducted this…
Anthropic Claude Mythos Preview: AI Agent
Claude Mythos Preview is an AI agent by Anthropic that discovered cryptographic attack techniques, including weakening the HAWK digital signature scheme.
National Institute of Standards and Technology
NIST is a U.S. government agency that standardizes cryptographic algorithms. Anthropic's AI agent attacked HAWK, a candidate digital signature scheme in NIST's…