News
-
"Raspberry Pi Ditches Default Logins to Boost Security"The developers behind Raspberry Pi have enhanced security. A senior principal software engineer explained that previously, users were able to keep the default username “pi.” They were also able to bypass a setup wizard which requested users to…
-
"SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts"A team of researchers at Salt Security's Salt Labs discovered a Server-Side Request Forgery (SSRF) flaw in the Application Programming Interface (API) of a large financial technology (fintech) platform. The flaw could have compromised millions of bank…
-
HoTSoS 2022 Best Undergraduate Poster AwardHOTSOS 2022 BEST UNDERGRADUATE POSTER AWARD Congratulations to Sanjana Cheerla at NCSU for winning the HoTSoS Best Undergraduate Poster Award for their poster Identifying Online Misbehavior. Check out the Announcement & Closing Remarks…
-
HoTSoS 2022 Best Poster AwardHOTSOS 2022 BEST POSTER AWARD Congratulations to Samin Yaseer Mahmud & William Enck at NCSU for winning the HoTSoS Best Poster Award for their poster A Study of Security Weakness in Android Payment Service Provider SDKs. Check out…
-
"Employee Info Among 13 Million Records Leaked by Fox"A team at Website Planet has found that a configuration error exposed millions of internal records traced back to Fox News, including personally identifiable information on employees. The researchers claimed that anyone with an internet connection…
-
"Block Warns Eight Million Customers of Insider Breach"A leading US payments company is contacting over eight million current and former customers of its Cash App Investing subsidiary that a malicious insider may have accessed their details. San Francisco-headquartered Block revealed the news in an SEC…
-
"New Technique Offers Faster Security for Non-Volatile Memory Tech"Researchers at North Carolina (NC) State University have developed a new method that uses hardware and software to strengthen file system security for next-generation memory technologies called Non-Volatile Memories (NVMs). Their encryption technique…
-
"Building Stronger and Faster Blockchains"A team of researchers has developed an algorithm, which is a new Byzantine Fault Tolerance (BFT) consensus protocol, to improve the resiliency, efficiency, and speed of blockchains. The new BFT consensus protocol can overcome faults and avoid system…
-
"Detecting Distributed Denial of Service Attacks - Deep Learning-Based Distributed Denial-Of-Service Detection"A new study in the International Journal of Networking and Virtual Organizations explores the use of deep learning to detect Distributed Denial-of-Service (DDoS) attacks, which could help service providers lessen the effects of these attacks. According…
-
Science of Security and Privacy 2022 Annual ReportThe Science of Security and Privacy 2022 Annual Report is now available. This report highlights the progress and accomplishments of the Science of Security and Privacy initiative.
-
"Cyber and Physical Security Should Collaborate: What Does It Take to Achieve This"Organizations have become increasingly dependent on Internet-based technologies for building management systems, Internet of Things (IoT) devices, operational technology, and other physical assets. These technologies introduce new security…
-
"Pitt Electrical and Computer Engineers Uncover Hardware Security Vulnerability on Android Phones"A study conducted by a team of researchers at the University of Pittsburgh Swanson School of Engineering found that the Graphics Processing Unit (GPU) in some Android smartphones could be used to eavesdrop on a user's credentials when they type them…