In recent years, there have been a lot of ransomware infections, which have forced healthcare organizations across the U.S. to confront their security weaknesses. Yet largely missing from the equation has been a reliable and thorough…

Researchers from Ruhr University Bochum and Munster University of Applied Sciences developed PDFex attacks that can be used to exfiltrate plaintext content from encrypted PDF documents. These attacks were successfully tested against 27 popular desktop…

A security researcher created a tool called the O.MG cable, which is a modified Apple lightning cable capable of hacking a computer remotely. In addition to performing the normal functions of an Apple cable such as charging phones and transferring data,…

Industrial companies are increasingly turning to artificial intelligence (AI) technology to help bolster the cybersecurity of their critical infrastructure devices as cyberattacks against such infrastructure grows in frequency. The Norwegian aluminum…

A new flaw has been discovered.  The flaw enables bypassing the security protections present in most Apple mobile devices. While the vulnerability can't be patched, an attacker would need physical access to exploit it.  The exploit,…

The Department of Homeland Security (DHS) has decided to revive efforts to strengthening aircraft cybersecurity following a recent incident in which the European aerospace and defense giant, Airbus, suffered a state-sponsored cyberattack. According to…

A flaw has been discovered in ICAO 9303, the security standard of biometric e-passports. An electronic passport has an embedded chip that contains biometric information used to authenticate the identity of the passport bearer. The flaw discovered by…

The winning paper is Evaluating Fuzz Testing by George Klees, Andrew Ruef, Benji Cooper, Shiyi Wei, and Michael Hicks. This paper was presented at ACM SIGSAC Conference on Computer and Communications Security (CCS '18) in Toronto.

A new bill, titled the DHS Cyber Hunt and Incident Response Teams Act, has been approved by the U.S. Senate. The aim of the bill is to help government agencies and private-sector companies protect themselves against ransomware attacks. Recent ransomware…

In a new study that was conducted, it has been discovered that 38% of the 2019 Fortune 500 companies do not have a chief information security officer (CISO). It was also found that the transportation industry is the most security-conscious,…

Over a year has passed, since the introduction of the General Data Protection Regulation (GDPR). During a new study, it has been discovered that only 28% of companies have successfully achieved GDPR compliance. Only 30% of…

Summer 2019 Lablet Quarterly meeting focuses on Cyber-Physical Systems