Hardening Your VPN
September 30 2021The NSA and CISA have released a document on how to harden your VPN.
Read moreMore Detail on the Juniper Hack and the NSA PRNG Backdoor
September 9 2021We knew the basics of this story, but it’s good to have more detail. Here’s me in 2015 about this Juniper hack. Here’s me in 2007 on the NSA backdoor.
Read moreMore Military Cryptanalytics, Part III
August 31 2021Late last year, the NSA declassified and released a redacted version of Lambros D. Callimahos’s Military Cryptanalytics, Part III. We just got most of the index. It’s hard to...
Read moreThis is a newly unclassified NSA history of its reaction to academic cryptography in the 1970s: “NSA Comes Out of the Closet: The Debate over Public Cryptography in the...
Read moreNSA Discloses Vulnerabilities in Microsoft Exchange
April 16 2021Amongst the 100+ vulnerabilities patch in this month’s Patch Tuesday, there are four in Microsoft Exchange that were disclosed by the NSA.
Read moreMore Biden Cybersecurity Nominations
April 13 2021News: President Biden announced key cybersecurity leadership nominations Monday, proposing Jen Easterly as the next head of the Cybersecurity and Infrastructure Security Agency and John “Chris” Inglis as the first...
Read moreChinese Hackers Stole an NSA Windows Exploit in 2014
March 4 2021Check Point has evidence that (probably government affiliated) Chinese hackers stole and cloned an NSA Windows hacking tool years before (probably government affiliated) Russian hackers stole and then...
Read moreMilitary Cryptanalytics, Part III
January 4 2021The NSA has just declassified and released a redacted version of Military Cryptanalytics, Part III, by Lambros D. Callimahos, October 1977.
Parts I and II, by Lambros D. Callimahos...
Read moreVMware Flaw a Vector in SolarWinds Breach?
December 18 2020U.S. government cybersecurity agencies warned this week that the attackers behind the widespread hacking spree stemming from the compromise at network software firm SolarWinds used weaknesses in other, non-SolarWinds...
Read moreNSA on Authentication Hacks (Related to SolarWinds Breach)
December 18 2020The NSA has published an advisory outlining how “malicious cyber actors” are “are manipulating trust in federated authentication environments to access protected data in the cloud.” This is...
Read more
Recent Comments