Check Point response to the "Evil Maid" attack

Symptoms Check Point Full Disk Encryption is not vulnerable to the "Evil Maid" attack. Solution Full technical details of the "Evil Maid" attack Check Point Full Disk Encryption is not vulnerable to the "Evil Maid" attack, as this particular program specifically targets the True Crypt boot code,...

Eugene Kaspersky: My Thoughts on Internet Anonymity

There seems to be quite a loud response to what I thought was a rather simple idea. In this post, I am going to go over the main points – somewhere when I have more time I’ll share my ideas in detail so people could see exactly what I am proposing. 1. Common users are NOT anonymous for police and...

Modern Banker Malware Undermines Two-Factor Authentication

Once pitched as an additional layer of security for E-banking transactions, two-factor authentication is slowly becoming an easy to bypass authentication process, to which cybercriminals have successfully adapted throughout the last couple of years. Read the full story zdnet.com. Also see this MI...

Hackers Using Trojans to Steal One-Time Passwords

It seems that hackers have not been taking the move to two-factor authentication lying down. Instead, they have been hard at work figuring out a method for siphoning off the one-time passwords generated by devices such as the RSA SecurID token and using them immediately to steal money from victim...

CRYPTO-Server installvariables.properties LDAP Credential Local Disclosure

A version of CRYPTOCard CRYPTO-Server, the server component of a commercial two-factor authentication system, is installed on the remote host. When CRYPTO-Server was installed on the remote host, the installer left credentials used to configure the application with Active Directory in a log file,...

Aladdin eToken 3.3.3.x Hardware USB Key Private Data Extraction

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: eToken Private Information Extraction and Physical Attack Release Date: May 4, 2000 Application: N/A Platform: Aladdin eToken USB Key 3.3.3.x Severity: An attacker can access all private information...

DUO-PSA-2021-001: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2021-001 Publication Date: 2021-04-15 Revision Date: 2021-04-15 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Security has fixed an issue that could have allowed an attacker with primary credentials of another user to bypass...

DUO-PSA-2021-001: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2021-001 Publication Date: 2021-04-15 Revision Date: 2021-04-15 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Security has fixed an issue that could have allowed an attacker with primary credentials of another user to bypass...

DUO-PSA-2015-003: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2015-003 Original Publication Date: 2015-08-06 Revision Date: 2015-08-10 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue which, under certain configurations, could have enabled attackers to bypass...

DUO-PSA-2015-003: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2015-003 Original Publication Date: 2015-08-06 Revision Date: 2015-08-10 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue which, under certain configurations, could have enabled attackers to bypass...

CVE-2024-52948

CSRF on 2FA registration...

Add your Outlook.com account in Outlook for Windows

None None...

Vulnerability to bypass two-factor authentication with remember-me option

Bundle version: 4.10.0 Symfony version: 3.4.31 Description Bypass 2fa by rememberme cookie To Reproduce We have a login form with rememberme checkbox functionality, When using the checkbox, symfony creates a cookie "REMEMBERME". That moment we get redirected to the 2fa-auth page. We have no acces...