#security #Twitter
https://blog.cryptographyengineering.com/2025/06/09/a-bit-more-on-twitter-xs-new-encrypted-messaging/
https://blog.cryptographyengineering.com/2025/06/09/a-bit-more-on-twitter-xs-new-encrypted-messaging/
A Few Thoughts on Cryptographic Engineering
A bit more on Twitter/X’s new encrypted messaging
Update 6/10: Based on a short conversation with an engineering lead at X, some of the devices used at X are claimed to be using HSMs. See more further below. Matthew Garrett has a nice post about T…
👏2🤨1
#Security Analysis: MCP Protocol Vulnerabilities in #AI Toolchains
https://www.cyberark.com/resources/threat-research-blog/is-your-ai-safe-threat-analysis-of-mcp-model-context-protocol
https://www.reddit.com/r/netsec/comments/1ldiilv/security_analysis_mcp_protocol_vulnerabilities_in/
https://www.cyberark.com/resources/threat-research-blog/is-your-ai-safe-threat-analysis-of-mcp-model-context-protocol
https://www.reddit.com/r/netsec/comments/1ldiilv/security_analysis_mcp_protocol_vulnerabilities_in/
👀2👌1🙈1
#Windows #BitLocker #security
https://www.tomshardware.com/tech-industry/cyber-security/microsoft-bitlocker-protected-drives-can-now-be-opened-with-just-some-files-on-a-usb-stick-yellowkey-zero-day-exploit-demonstrates-an-apparent-backdoor
The process is dead simple: grab any USB stick, get write access to the "System Volume Information," and copy into it the "FsTx" folder and its contents. Shift+click Restart to get Windows to the recovery environment, but then switch to holding down the Control key and don't let go. The machine will reboot, and without asking any questions or showing any menus, will drop you in an elevated command line with full access to the formerly Bitlocked drive, without asking for any keys.
https://www.tomshardware.com/tech-industry/cyber-security/microsoft-bitlocker-protected-drives-can-now-be-opened-with-just-some-files-on-a-usb-stick-yellowkey-zero-day-exploit-demonstrates-an-apparent-backdoor
Tom's Hardware
Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates…
Also, it's a twofer with the GreenPlasma zero-day local privilege escalation.
👏2👨💻2🔥1
#security #WiFi
https://wballiance.com/wi-fi-sensing-101-an-introduction/
https://dl.acm.org/doi/10.1145/3719027.3765062
What is Wi-Fi Sensing, what can it do, and should you care? Well, the answer to the latter is yes, and the reason is that there is a huge potential market that can impact people’s lives in a positive way AND can help contribute green credentials to everyone participating in this eco-system. Add on to this, the potential business opportunities, and we have a winner!
So, what is it? Wi-Fi Sensing is a technology that enables motion detection, gesture recognition, and biometric measurement by using existing Wi-Fi signals and networks. Wi-Fi Sensing operates similarly to a radar system, detecting motion and providing information and data insights that can be used to enable new Wi-Fi-based services. Wi-Fi Sensing creates a bridge for Wi-Fi service providers to enter new markets such as home security, health care, enterprise, and building automation/management markets, among many others.
https://wballiance.com/wi-fi-sensing-101-an-introduction/
https://dl.acm.org/doi/10.1145/3719027.3765062
Wireless Broadband Alliance
Wi-Fi Sensing 101: An Introduction
What is Wi-Fi Sensing, what can it do, and should you care? Well, the answer to the latter is yes, and the reason is that there is a huge potential market that can impact people’s lives in a positive way AND can help contribute green credentials to everyone…
🤯2🤨2🔥1
Please open Telegram to view this post
VIEW IN TELEGRAM
The Verge
SpaceXAI’s Grok programming tool was uploading its users’ entire codebase to cloud storage
Oops!
🥰3👏1
#security #LLM #way
Researchers at JFrog analyzed 55 vulnerability reports regarding #SQLite that were recently published. Based on the data from these reports, MITRE assigned #CVE identifiers to all of the issues. Three issues were classified as critical, and Red Hat assigned the most dangerous vulnerability (CVE-2026-51302) a severity score of 10 out of 10 in its databases, while SUSE rated it 9.8 out of 10. A detailed analysis of the reported vulnerabilities revealed that 54 of the 55 vulnerabilities, including the one marked as critical, are fictitious and caused by hallucinations from the AI model:
https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/
Researchers at JFrog analyzed 55 vulnerability reports regarding #SQLite that were recently published. Based on the data from these reports, MITRE assigned #CVE identifiers to all of the issues. Three issues were classified as critical, and Red Hat assigned the most dangerous vulnerability (CVE-2026-51302) a severity score of 10 out of 10 in its databases, while SUSE rated it 9.8 out of 10. A detailed analysis of the reported vulnerabilities revealed that 54 of the 55 vulnerabilities, including the one marked as critical, are fictitious and caused by hallucinations from the AI model:
https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/
Jfrog
SQLite Critical CVEs or LLM Slop? | JFrog
The JFrog security research team recently identified a supply chain attack targeting the `xinference` package on PyPI. Versions 2.6.0, 2.6.1, and 2.6.2 were compromised and yanked by maintainers after users reported suspicious behavior. If you installed or…
🤣5👏3😨2