Florida Tech computer science student Blake Janes discovered systematic design flaws in internet-connected doorbells and security cameras manufactured by Ring, Nest, SimpliSafe, and eight other manufacturers. Janes found that a shared account can still…

Researchers at a security firm called Promon, have discovered a new vulnerability, called Strandhogg 2.0.  This vulnerability affects all devices running Android 9.0 and earlier.  This vulnerability lets malware imitate legitimate apps to steal…

According to researchers at F-Secure, Android devices manufactured by Huawei, Samsung, Xiaomi, and others are being shipped and sold with significantly different levels of on-board security in different regions. The differences in Android security…

Researchers at SentinelOne have discovered a new version of the Sarwent malware.  Sarwent is a malware that started as a loader for other malware but has recently been updated with more functionalities.  The new variant of Sarwent can open…

SoS Musings #37 - The Double-Edged Sword of AI and ML    

Cyber Scene #44 - Tracing Tracks: So Near Yet So Far Away

Cybersecurity Snapshots #6 - Will Biometric Authentication Soon Replace Password Authentication?

Spotlight on Lablet Research #6 - Project: Contextual Integrity for Computer Systems 

Rockwell Automation and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published advisories about vulnerabilities associated with the Electronic Data Sheet (EDS) subsystem discovered by researchers at the industrial cybersecurity firm…

The Queens of Code will be presenting four talks about NSA’s Computing Women from the 60s, 70s, and 80s as part of the Cyber Center for Education & Innovation (CCEI) series on the NEPRIS platform. These computing pioneers contributed to early…

Researchers at Veracode analyzed 351,000 external libraries in 85,000 applications and found that open-source libraries are widespread.  Many application developers use open-source libraries to help create their applications because it allows them…

​Pub Crawl summarizes, by hard problems, sets of publications that have been peer reviewed and presented at SoS conferences or referenced in current work. The topics are chosen for their usefulness for current researchers.