Zip Slip Vulnerability Affects Thousands of Projects Researchers discovered a flaw in almost all zip-style file decompressors – RAR, TAR, 7ZIP-APK and others. The problem is caused by a very old attack vector called directory traversal that these libraries do not handle correctly. The decompressor libraries were likely downloaded from places like Github and Stack […]
Continue reading → [DISPLAY_ACURAX_ICONS]NSA Deleting All Call Detail Records (CDRs) Acquired Since 2015 While the NSA is not providing a lot of details about what went wrong, the NSA is saying that it is deleting all CDRs acquired since 2015 because of technical irregularities that resulted in it receiving data that, likely, would be illegal under the current […]
Continue reading → [DISPLAY_ACURAX_ICONS]GCHQ, the British version of the NSA created a program around 2008 that hacked into Yahoo’s network and captured stills of video chats being conducted by Yahoo users. So as not to overload GCHQ’s servers, the software only stored one image per video session every 5 minutes. Still, in a 6 month period, they captured […]
Continue reading → [DISPLAY_ACURAX_ICONS]In case you didn’t know whom or what to believe in the battle between Gene Kaspersky and the U.S. Government, it just got a little weirder. You probably remember that the DoD told its people to remove Kaspersky’s software from it’s machines. They didn’t say why. But, no matter how this story plays out, that […]
Continue reading → [DISPLAY_ACURAX_ICONS]The NSA has two roles in life – OFFENSIVE cyber and DEFENSIVE cyber. The NSA spends, according to some estimates, 90% of its cyber budget on offensive cyber. NSA, in its alter ego Cyber Command, is charged with defensive cyber. What this means is that when NSA finds a bug like the one that was […]
Continue reading → [DISPLAY_ACURAX_ICONS]Some of you probably remember Edward Snowden (just kidding!). Snowden was a Booz, Allen, Hamilton employee, on contract to the NSA. Well now there is another Snowden at Booz. Booz has annual revenue in excess of $5 billion and has contracts all over the federal government. Earlier this month, the feds arrested Harold Thomas Martin […]
Continue reading → [DISPLAY_ACURAX_ICONS]