FluxCloud Frontline — Writeup

InfoSec Write-ups - Medium-- FluxCloud FrontlineHack.lu WriteupThe challenge FluxCloud Frontline (web, hard) was part of the amazing Hack.lu CTF. It took a friend and me, both playing for the team FAUST, two evenings to crack the great challenge.In the following, I describe the plain solution and leave out the many rabbit holes we stepped into.The ChallengeWith … Continue reading FluxCloud Frontline — Writeup

Lock and Code S1Ep18: Finding consumer value in Cybersecurity Awareness Month with Jamie Court

Malwarebytes Labs-- This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Jamie Court, president of the non-profit advocacy group Consumer Watchdog, about the consumer value in Cybersecurity Awareness Month. Launched initially as a joint effort between government and … Continue reading Lock and Code S1Ep18: Finding consumer value in Cybersecurity Awareness Month with Jamie Court

Experts Warn of Privacy Risks Caused by Link Previews in Messaging Apps

The Hacker News-- Cybersecurity researchers over the weekend disclosed new security risks associated with link previews in popular messaging apps that cause the services to leak IP addresses, expose links sent via end-to-end encrypted chats, and even unnecessarily download gigabytes of data stealthily in the background. "Links shared in chats may contain private information intended … Continue reading Experts Warn of Privacy Risks Caused by Link Previews in Messaging Apps

Google patches actively exploited zero-day bug that affects Chrome users

Malwarebytes Labs-- Google has recently released Chrome version 86.0.4240.111 to patch several holes. One is for a zero-day flaw – that means a vulnerability that is being actively exploited in the wild. The flaw, which is officially designated as CVE-2020-15999, occurs in the way FreeType handles PNG images embedded in fonts using the Load_SBit_Png function. … Continue reading Google patches actively exploited zero-day bug that affects Chrome users