CVE-2016-2183: Triple DES Cipher Vulnerability
CVE-2016-2183 is a vulnerability in the triple DES cipher that allows an attacker to recover data from long-running connections due to weak…
Tag: encryption
BlackCat Ransomware: Technical Analysis and Defense
BlackCat ransomware is a cross-platform threat written in Rust, targeting Windows, Linux, and VMware ESXi systems. It uses advanced encryption and data…
Proton Mail: Encrypted Email Service
The extortion contact email e78393397@proton.me was used in both the prior JADEPUFFER campaign and the ENCFORGE ransomware campaign.
Casbaneiro Banking Trojan: Code Sharing with Ousaban
Casbaneiro is a Brazilian banking trojan that shares a custom string encryption scheme with Ousaban, indicating code reuse within the Tetrade group.
Microsoft Accelerates Post-Quantum Cryptography Shift to 2029
Microsoft has announced an acceleration of its quantum-safe security roadmap, moving the target for transitioning critical products and services to post-quantum cryptography…
Signal Debuts Automatic Key Verification
Signal introduced automatic key verification to complement safety numbers, providing independent verification of encryption keys without in-person meetings.
Russia Used Cellebrite on Jailed Activist’s iPhone Months After Sales Cutoff
Russian authorities used Cellebrite's UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovarov in June 2021, three…
MacBook: Apple Laptop
The MacBook is a laptop by Apple. It was also seized from Pivovarov, but the extraction failed due to encryption, as noted…
Windows BitLocker Bypassed by GreatXML Exploit via Recovery Partition XML Files
Windows BitLocker, Microsoft's full-disk encryption feature, is vulnerable to a new bypass exploit called GreatXML. The exploit uses XML files placed in…
MySQL: Open-Source Relational Database
MySQL's AES_ENCRYPT() function was used by JADEPUFFER in the prior campaign to encrypt data in production databases.