Blog post elaborating on the very limited added value of authentication in TETRA in many networks; it provides no authenticity guarantees for messages/traffic.

Part 1 of a technical deep-dive into the Pass-ta-key Golden Attack, covering a new method for extracting the Security Domain Secret (SDS) of Google Password Manager from Chrome process memory.

Era Research uncovered Greeter, a Chinese-language exploitation framework that hid malicious commands inside "hello" messages to attack exposed Flowise AI deployments.

An AI assisted security review found local file disclosure, SQL injection, access control flaws, and other vulnerabilities in OpenEMR. There are 42 advisories fixed in version 8.5.0 that credit this research.

Google disrupted the XCPE botnet affecting 1.3 million Android devices, exposing allegations of manufacturer-installed backdoors and supply-chain security risks.

The institutions that have the authority to police international finance are no longer necessarily the institutions that possess the capabilities to do so.

Coinspect demonstrated a Firecracker sandbox escape from guest userspace, gained code execution in its host-side process, and used a second issue to bypass Firecracker's...

What Our Danfoss Decoy Recorded During the European Refrigeration Incidents

The fridge freezer hacks across Europe have attracted a lot of media attention over the past few days, including coverage of our intelligence and analysis in The Wall Street Journal…

Yuriy Nazarenko created ‘OnlyFake’, a site that let anyone churn out realistic fake IDs with AI. Then the North Koreans came knocking.

A Claude Dispatch flaw let a browser extension escape the browser and run code on the OS through Claude Desktop, even on another computer. Dispatch is being retired, but the design flaw behind it runs through other parts of the Claude suite.

A China-aligned group hijacked DNS to push the DarkVigil implant through Sogou Input Method's plain HTTP requests; Tencent fixed it in version 16.10.

Yes, that's right! Today we're at the aquarium.

Welcome back to yet another watchTowr Labs blog post. You can begin preparing your comments now.
























0:00

/0:20


1×


















What Is A Barracuda, And Why? Must We?

Barracuda’s…

Why Facer’s premium watch faces download fine on a free account, and how I’d fix it.