Insecure Features in PDFs (2021)(web-in-security.blogspot.com)

76 points by todsacerdoti 2 years ago | 22 comments

OpenVPN Is Open to VPN Fingerprinting(arxiv.org)

119 points by PaulHoule 2 years ago | 51 comments

My ZIP isn't your ZIP: Identifying and exploiting semantic gaps between parsers(usenix.org)

52 points by layer8 1 year ago | 19 comments

Hackers stole access tokens from Okta's support unit(krebsonsecurity.com)

279 points by todsacerdoti 3 years ago | 137 comments

NeVerMore: Exploiting RDMA Mistakes in NVMe-Of Storage Applications (2022)(arxiv.org)

10 points by transpute 2 years ago | 1 comments

Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out(csoonline.com)

412 points by miles 2 years ago | 271 comments

CSO Online news article on a Microsoft Authenticator design flaw that overwrites existing MFA accounts when new ones are added, locking users out.