Compromising OpenWrt Supply Chain(flatt.tech)

546 points by udev4096 1 year ago | 91 comments

Flatt Security research post by RyotaK describing a supply chain attack against OpenWrt's firmware build service involving a SHA256 hash collision.

Cloudflare Email Service: private beta(blog.cloudflare.com)

638 points by tosh 1 year ago | 514 comments

Cloudflare blog post announcing the private beta of Cloudflare Email Service, a service for sending and receiving email from its developer platform.

DDoS Botnet Aisuru Blankets US ISPs in Record DDoS(krebsonsecurity.com)

167 points by JumpCrisscross 1 year ago | 121 comments

The CISA Alert: Security Beyond Solitary Confinement(jnior.com)

5 points by bscloutier 21 days ago | 1 comments

Blog post from INTEG (JNIOR) responding to a CISA alert on Internet-exposed operational technology, proposing lightweight ways to deter malicious automated access to OT controllers.

Show HN: Shibuya – A High-Performance WAF in Rust with eBPF and ML Engine(ghostklan.com)

19 points by germainluperto 8 months ago | 13 comments

Encrypted traffic interception on Hetzner and Linode targeting Jabber service(notes.valdikss.org.ru)

637 points by f311a 3 years ago | 257 comments

Blog post detailing discovery of a TLS man-in-the-middle interception of jabber.ru XMPP servers hosted on Hetzner and Linode using Let's Encrypt certificates.