News
  • "Your Digital Footprints Are More Than A Privacy Risk – They Could Help Hackers Infiltrate Computer Networks"
    Ravi Sen, a Texas A&M cybersecurity researcher, brings further attention to how information shared online can help hackers successfully execute phishing attacks. Using the Internet results in the creation of a trail of data or a set of digital…
  • "With AI RMF, NIST Addresses Artificial Intelligence Risks"
    Artificial intelligence (AI) applications within business and government organizations are being adopted rapidly.  Some of the AI applications being adopted rapidly include: automating activities to function more efficiently, reshaping shopping…
  • "Raspberry Pi Ditches Default Logins to Boost Security"
    The developers behind Raspberry Pi have enhanced security.  A senior principal software engineer explained that previously, users were able to keep the default username “pi.” They were also able to bypass a setup wizard which requested users to…
  • "SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts"
    A team of researchers at Salt Security's Salt Labs discovered a Server-Side Request Forgery (SSRF) flaw in the Application Programming Interface (API) of a large financial technology (fintech) platform. The flaw could have compromised millions of bank…
  • HoTSoS 2022 Best Undergraduate Poster Award
    HOTSOS 2022 BEST UNDERGRADUATE POSTER AWARD Congratulations to Sanjana Cheerla at NCSU for winning the HoTSoS Best Undergraduate Poster Award for their poster Identifying Online Misbehavior. Check out the Announcement & Closing Remarks…
  • HoTSoS 2022 Best Poster Award
    HOTSOS 2022 BEST POSTER AWARD Congratulations to Samin Yaseer Mahmud & William Enck at NCSU for winning the HoTSoS Best Poster Award for their poster A Study of Security Weakness in Android Payment Service Provider SDKs.  Check out…
  • "Employee Info Among 13 Million Records Leaked by Fox"
    A team at Website Planet has found that a configuration error exposed millions of internal records traced back to Fox News, including personally identifiable information on employees.  The researchers claimed that anyone with an internet connection…
  • "Block Warns Eight Million Customers of Insider Breach"
    A leading US payments company is contacting over eight million current and former customers of its Cash App Investing subsidiary that a malicious insider may have accessed their details.  San Francisco-headquartered Block revealed the news in an SEC…
  • "New Technique Offers Faster Security for Non-Volatile Memory Tech"
    Researchers at North Carolina (NC) State University have developed a new method that uses hardware and software to strengthen file system security for next-generation memory technologies called Non-Volatile Memories (NVMs). Their encryption technique…
  • "Building Stronger and Faster Blockchains"
    A team of researchers has developed an algorithm, which is a new Byzantine Fault Tolerance (BFT) consensus protocol, to improve the resiliency, efficiency, and speed of blockchains. The new BFT consensus protocol can overcome faults and avoid system…
  • "Detecting Distributed Denial of Service Attacks - Deep Learning-Based Distributed Denial-Of-Service Detection"
    A new study in the International Journal of Networking and Virtual Organizations explores the use of deep learning to detect Distributed Denial-of-Service (DDoS) attacks, which could help service providers lessen the effects of these attacks. According…
  • Science of Security and Privacy 2022 Annual Report
    The Science of Security and Privacy 2022 Annual Report is now available. This report highlights the progress and accomplishments of the Science of Security and Privacy initiative.