man in the middle attacks
New Attack Against Wi-Fi
It’s called AirSnitch: Unlike previous Wi-Fi attacks, AirSnitch exploits core features in Layers 1 and 2 and the failure to bind and synchronize a client across these and higher layers, other nodes, ...
‘Blast-RADIUS’ Critical Bug Blows Up IT Vacation Plans
MD5 MITM Muddle: Ancient, widely used protocol has CVSS 9.0 vulnerability ...
Revealed: Facebook’s “Incredibly Aggressive” Alleged Theft of Snapchat App Data
Meta MITM IAAP SSL bump: Zuck ordered “Project Ghostbusters”—with criminal consequences, says class action lawsuit ...
SSH FAIL: Terrapin Attack Smashes ‘Secure’ Shell Spec
Testy Testudine: Lurking vuln in SSH spec means EVERY implementation must build patches ...
‘BrutePrint’ Unlocks Android Phones — Chinese Researchers
Or, at least, OLDER phones: SPI/TEE MITM FAIL ...
CISA Warns CISOs to Brace for Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), a United States federal agency under the oversight of the Department of Homeland Security, is urging business leaders and those responsible for digital security ...
New Bluetooth Vulnerability
There’s a new unpatched Bluetooth vulnerability: The issue is with a protocol called Cross-Transport Key Derivation (or CTKD, for short). When, say, an iPhone is getting ready to pair up with Bluetooth-powered ...
Interesting Attack on the EMV Smartcard Payment Standard
It’s complicated, but it’s basically a man-in-the-middle attack that involves two smartphones. The first phone reads the actual smartcard, and then forwards the required information to a second phone. That second phone ...
Stopping Man-in-the-Middle Attacks With Cryptography
Man-in-the-middle. Man-in-the-browser. IP spoofing. DNS spoofing. They’re all part of the happy family of hacks generally known as Man-in-the-middle attacks, wherein a bad actor secretly relays and possibly alters the communication between ...
Preventing Man-in-the-Middle Attacks
When it comes to cyber security, sometimes the jargon can feel overwhelming. Ransomware, encryption, man-in-the-middle attacks… The Vaporstream blog has covered ransomware and encryption in the past, so today I wanted to ...
