Last year before Black Hat we organized a crypto challenge and gave out 10 ETH to the winners. The goal of the challenge was to
Critical Vulnerabilities Cisco Smart Install Actively Exploited to Cause Mass Network Outages (CVE-2018-0171 & CVE-2018-0156)
Summary The Cyber Fusion Center has learned of malicious, seemly automated, exploitation of recent Cisco IOS and Cisco IOS XE critical vulnerabilities (CVE-2018-0171 & CVE-2018-0156)
Breaking RSA OAEP with Manger’s attack
The RSA cryptosystem has had its fair share of attacks over the years, but among the most impressive, you can find the infamous Bleichenbacher attack
Wire applications audit (with X41 D-Sec)
Last year Kudelski Security’s JP Aumasson and X41 D-Sec‘s Markus Vervier were hired to audit Wire‘s cryptography core, the Proteus library. After this audit of the crypto, Wire wanted a
Blockchain: where to start
People often contact me to ask about “the blockchain”—where the definite article ‘the‘ tells a lot about their experience with c̶r̶y̶p̶t̶o̶ blockchains. My answer will
CVE-2018-010 – Cisco Updates Advisory Regarding Critical Remote Code Execution and Denial of Service Vulnerabilities in ASA and FTD software
Summary On February 5th, 2018 Cisco updated an existing vulnerability advisory for CVE-2018-010 due to newly discovered attack vectors and because the original software fix
