How Leaky is your VPN?

How Leaky is your VPN?

A two decades old vulnerability has been discovered which results in exposing encrypted VPN traffic. And every VPN product is vulnerable on at least one device. The academic researchers have called the attack TunnelCrack and have published proof of concept exploit...

Popular Open Source Software Breaks Users’ Trust

Popular Open Source software Moq has broken user trust by quietly making changes that collects user email addresses. The popular software is distributed on the NuGet software registry and has been downloaded over 476 million times. The change was made in early August...
Open Source Maintainers Report

Open Source Maintainers Report

The Linux Foundation released a report on Open Source Maintainers. They interviewed some of the community’s most influential maintainers to understand more about how maintainers become maintainers, and to capture their experiences, observations and success...

Company using Keystroke Logging to Measure Employee Productivity

How do you measure productivity of remote workers? For one company, productivity is measure by having more than 500 keystrokes on the computers every hour. In a rare case for Australia, an employee had been terminated for not meeting the required productivity levels....

Techniques for Getting Malware onto Android Devices

How are malicious apps getting pass Google Play Store’s review process and their rigorous PHA (Potentially Harmful Application) screening? Well, they’re using a technique called versioning which is sneaky and hard to detect. The attackers would first...

Highly Accurate Acoustic Keylogger Attack

Academic researchers from British universities have developed a deep learning side channel attack that can be used to steal data from keyboard strokes that are recorded using a microphone with an accuracy of 95%. The audio can be recorded from a nearby microphone, or...