CVE-2022-34386

CVE-2022-34386 affects Dell SupportAssist for Home PCs (≤3.11.4) and SupportAssist for Business PCs (≤3.2.0) with a cryptographic weakness. An authenticated non-admin user could potentially exploit this to obtain sensitive information. Remediation per PT-2023-13372: upgrade Home PC branch to a ve...

CVE-2021-4239

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 18.4 quintillion messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to b...

On the Android Crypto Weakness, FDE Bypass, Hummingbad, and More

Mike Mimoso, Tom Spring and Chris Brook discuss the news of the week, including all things Android: the crypto weakness, the full disk encryption bypass, and new malware, Hummingbad, which impacts the mobile operating system. The three also discuss the TP-Link router fiasco. Download:...