Apple Chip Flaw Lets Hackers Steal Encryption Keys A group of researchers has found a serious security vulnerability in Apple’s M-series of chips that would allow attackers to steal secret keys from Mac and iPad devices. The problem affects Apple M1, M2 and M3 chips — which have been used in Apple desktops, notebooks and tablets since late
Zero Day Moves to Ghost Hi Everyone, This is an update and announcement to let you know that I've moved Zero Day from Substack to Ghost. The migration took a couple of months to complete, and I still have some design tweaks I need to do to the new site and some kinks
Nevada AG Asks Court to Ban Meta from Providing End-to-End Encryption to Minors Nevada's attorney general filed a motion this week to prevent Meta from providing end-to-end encryption to users under eighteen who reside in his state. The request is intended to combat predators who target minors for sexual exploitation and other criminal purposes, the AG states, and to allow law
Newsletter European Standards Body Votes to Release Secret Algorithms After hit with criticism earlier this year for keeping its encryption algorithms secret, the European standards body behind the TETRA algorithms has decided to open them to the public for scrutiny.
Newsletter Sophisticated StripedFly Spy Platform Masqueraded for Years as Crypto Miner Malware discovered in 2017 was long classified as a crypto miner. But researchers at Kaspersky Lab say it's actually part of a sophisticated spy platform that has infected more than a million victims.
Newsletter How North Korean Workers Tricked U.S. Companies into Hiring Them and Secretly Funneled Their Earnings into Weapons Programs Thousands of IT workers allegedly working on behalf of North Korea managed to trick U.S. companies into hiring them as remote developers — then used the money to help finance North Korean weapons.
Newsletter Standards Body Considers Uncloaking Secret Encryption Algorithms The European standards body that created secret encryption algorithms for use in TETRA radio communications is weighing whether to make new algorithms public, following backlash over its secrecy.
Newsletter Did a Journalist Violate Hacking Law to Leak Fox News Clips? The Government Thinks He Did. But attorneys for Timothy Burke say a raid on his home and office exhibit government over-reach and misuse of the federal hacking law, and raises First Amendment issues.
Newsletter Radiation Spikes at Chernobyl: A Mystery Few Seem Interested in Solving Ever since radiation sensors at the Chernobyl nuclear plant spiked dramatically following the Russian invasion, there have been questions about what caused the spikes. Now the mystery deepens.
Newsletter Interview with the ETSI Standards Organization That Created TETRA "Backdoor" Brian Murgatroyd spoke with me about why his standards group weakened an encryption algorithm used to secure critical radio communications of police, military, critical infrastructure and others.
Newsletter SEC Targets SolarWinds' CISO for Rare Legal Action Over Russian Hack In a highly rare move, the SEC sent notice to SolarWinds' CISO, and other specific employees, indicating they may face legal action over Russia's hack of their company.
Newsletter Updates and Timeline for 3CX and X_Trader Hacks Mandiant revealed this week that the hack of 3CX was actually a double supply-chain hack that first involved hacking and compromising another company's software. Here's a timeline of the events.
Newsletter Software Maker 3CX Was Compromised in First-of-its-Kind Threaded Supply-Chain Hack - Updated Hackers first compromised a different software maker and embedded malware in one of its programs. 3CX got compromised when a worker downloaded that program. It's not known why worker downloaded it.
Newsletter Leaked Pentagon Document Claims Russian Hacktivists Breached Canadian Gas Pipeline Company The document, part of a cache of leaks recently circulated on the internet, suggests the hackers had the ability to cause an explosion and sought instruction from the FSB.
Newsletter Hello and an Update I’ve been meaning to send an email to all of you for a while to fill you in on what I’ve been working on and to assure you that I haven’t abandoned Zero Day. I’ve been working on a number of projects that have been taking
Newsletter White House Says President Zelensky Set Security Parameters for His Visit to the U.S. Ukrainian President Volodymyr Zelensky will visit the White House on Wednesday for his first trip outside of Ukraine since the war began. He will hold a press conference and address Congress.
Newsletter Security Firms Aiding Ukraine During War Could Be Considered Participants in Conflict Experts say cybersecurity companies helping to defend Ukraine against Russian cyberattacks during the war could be considered direct participants in the hostilities and open themselves to attack.
Newsletter Viasat Hack "Did Not" Have Huge Impact on Ukrainian Military Communications, Official Says Contrary to initial reports that it resulted in a "really huge loss in communications in the very beginning of war," the hack did not have a huge impact on ability to coordinate military operations.
Newsletter Mysterious New Hacking Group Leaves Researchers Baffled The group, called Metador by the SentinelLabs researchers who discovered them, appears to be well-resourced and engaged in long-term espionage. But who is behind their operation is unclear.
Newsletter Is the Secret Service’s Claim About Erased Text Messages Plausible? (Updated) The Secret Service says data erased from the phones of some of its personnel — that may shed light on the agency's handling of the Jan. 6 insurrection — can’t be recovered. Is it telling the truth?
Newsletter What It Means that the U.S. Is Conducting Offensive Cyber Operations Against Russia Gen. Paul Nakasone's remarks this month about offensive operations against Russia caused a stir. But have people misinterpreted his words?
Newsletter Russia Began Setting Stage for Cyberattacks Against Ukraine a Year Ago The Kremlin’s cyber warriors began working to gain a foothold in Ukrainian government and critical infrastructure networks a year before the invasion, according to a report issued by Microsoft today.
