TLS – HACKMAGEDDON

More Details on CRIME Attack: Takes Advantage Of TLS Compression [VIDEO]

September 13, 2012May 24, 2015 Paolo Passeri 2 Comments BEAST, Compression, CRIME, Juliano Rizzo, SPDY, Thai Duong, TLS

More details have been released about CRIME, the brand new attack against TLS developed by Juliano Rizzo and Thai Duong.

Read more

What Security Vendors Said One Year Ago…

January 10, 2012May 24, 2015 Paolo Passeri 2 Comments Advanced Persistent Threat, Android, APT, Botnet, Check Point, Cisco Systems, Comodo, Comodo Breach, Coreflood, Diginotar, Diginotar Breach, Fortinet, Hlux, Information security, Kaspersky Lab, Kelihos, Liza Moon, McAfee, Mobile, Primoris Era, RSA, Rustock, Security Predictions 2011, Security Predictions 2012, Social media, Sony, Sony Breach, Sophos, SQL Injection, SQLi, SSL, Symantec, TLS, Trend Micro, XML Encryption

I did not resist, so after publishing the summary of Security Predictions for 2012, I checked out what security vendors

Read more

Browsing Security Predictions for 2012

January 8, 2012May 24, 2015 Paolo Passeri 4 Comments APT, Astaro, CaaS, Cisco Systems, Cloud, Consumerization, Crime as a Service, Cyber Weapons, Data Breach, Data Theft, DLP, DNSSEC, Embedded Hardware, Fortinet, Hacktivism, ICS, Information security, Kaspersky Lab, McAfee, Mobile, Mobile Malware, Money Laundry, NFC, Online Banking, Rogue Certificates, SCADA, Scareware, SEO Poisoning, SMB, Social media, Sophos, Spam, SSL, TLS, Trend Micro, Virtual Currency, Web Exploits, Websense

Update 01/11/2012: Year-to-Tear comparison with 2011 Security Predictions The new year has just come, vacations are over, and, as usually

Read more

The Beauty (RC4) and The BEAST (TLS)

September 25, 2011 5 Comments BEAST, CBC, Chrome, Google, Initialization vector, Juliano Rizzo, RC4, Security, SSL, Thai Duong, TLS, Transport Layer Security, WebSockets

Hard times for Information Security and for the authentication models it had been built upon. The inglorious falls of SecureID

Read more