NIST Issues Call for "Lightweight Cryptography" Algorithms

This is interesting: Creating these defenses is the goal of NIST's lightweight cryptography initiative, which aims to develop cryptographic algorithm standards that can work within the confines of a simple electronic device. Many of the sensors, actuators and other micromachines that will functio...

Ex-NSA staffer creates app to notify users of evil maid attack on MacBook

By Uzair Amir It is a fact that a MacBook cannot be easily This is a post from HackRead.com Read the original post: Ex-NSA staffer creates app to notify users of evil maid attack on MacBook...

PyRoMine Uses NSA Exploit for Monero Mining and Backdoors

The ShadowBrokers’ release of a trove of National Security Agency exploits last year appears to be the gift that keeps on giving, to the hacker community at least: A fresh malware that uses the EternalRomance tool has hit the scene, with Monero-mining as the stated goal. However, more damaging...

New NSA/Cyber Command Head Confirmed by Senate

It's Lt. Gen. Paul Nakasone. I know nothing about him...

PyRoMine malware disables security & mines Monero using NSA exploits

By Waqas The IT security researchers at Fortinet have discovered a dangerous new This is a post from HackRead.com Read the original post: PyRoMine malware disables security & mines Monero using NSA exploits...

Two NSA Algorithms Rejected by the ISO

The ISO has rejected two symmetric encryption algorithms: SIMON and SPECK. These algorithms were both designed by the NSA and made public in 2013. They are optimized for small and low-cost processors like IoT devices. The risk of using NSA-designed ciphers, of course, is that they include...

Leaked NSA Dump Also Contains Tools Agency Used to Track Other Hackers

A years ago when the mysterious hacking group 'The Shadow Brokers' dumped a massive trove of sensitive data stolen from the US intelligence agency NSA, everyone started looking for secret hacking tools and zero-day exploits. A group of Hungarian security researchers from CrySyS Lab and Ukatemi ha...

Fileless WannaMine Cryptojacking Malware Using NSA Exploit

By Waqas Forget WannaCry and welcome WannaMine, a fileless cryptojacking malware using This is a post from HackRead.com Read the original post: Fileless WannaMine Cryptojacking Malware Using NSA Exploit...

New Monero mining malware infected 500K PCs by using 2 NSA exploits

By Waqas Another day, another Monero mining malware - This one uses two This is a post from HackRead.com Read the original post: New Monero mining malware infected 500K PCs by using 2 NSA exploits...

After Section 702 Reauthorization

For over a decade, civil libertarians have been fighting government mass surveillance of innocent Americans over the Internet. We've just lost an important battle. On January 18, President Trump signed the renewal of Section 702, domestic mass surveillance became effectively a permanent part of U...

Opponents Vow to Continue the Fight after Trump Reauthorizes Domestic Spying Law

A controversial U.S. legal framework concerning domestic surveillance is poised to live on for another six years, but opponents say they plan to continue the fight. In a widely expected move, President Donald Trump signed the bill one day after the Senate approved it in a 65-34 vote. At issue is...

House Votes to Reauthorize Controversial Spy Provision, Section 702

The U.S. House of Representatives voted on Thursday to renew the National Security Agency’s spy powers to collect internet communications under Section 702 of the Foreign Intelligence Surveillance Amendments Act of 2008. The vote 256-to-164 in favor of the legislation ends a yearlong debate over...

NSA Morale

The Washington Post is reporting that poor morale at the NSA is causing a significant talent shortage. A November New York Times article said much the same thing. The articles point to many factors: the recent reorganization, low pay, and the various leaks. I have been saying for a while that the...

CVE-2018-5281

SonicWall SonicOS on Network Security Appliance NSA 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens...

CVE-2018-5280

SonicWall SonicOS on Network Security Appliance NSA 2016 Q4 devices has XSS via the Configure SSO screens...

Design/Logic Flaw

SonicWall SonicOS on Network Security Appliance NSA 2016 Q4 devices has XSS via the Configure SSO screens...

CVE-2018-5280

SonicWall SonicOS on Network Security Appliance NSA 2016 Q4 devices has XSS via the Configure SSO screens...

CVE-2018-5281

SonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices is affected by a cross-site scripting (XSS) vulnerability via the CFS Custom Category and Cloud AV DB Exclusion Settings screens. The available connected data confirms the affected product and the vulnerability class, but does ...

SonicWall NSA 66005600460036002600250M - Multiple Vulnerabilities

SonicWall NSA 66005600460036002600250M - Multiple Vulnerabilities Document Title: =============== SonicWall SonicOS NSA Web Firewall - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Date: ============= 2018-01-0...

SonicWall SonicOS NSA - Multiple Web Vulnerabilities

Document Title: =============== SonicWall SonicOS NSA - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Date: ============= 2018-01-06 Vulnerability Laboratory ID VL-ID: ==================================== 1725...