The Last Watchdog
JUNE 7, 2023
Back in 2002, when I was a reporter at USA Today , I had to reach for a keychain fob to retrieve a single-use passcode to connect remotely to the paper’s publishing system. Related: A call to regulate facial recognition This was an early example of multifactor authentication (MFA).
Malwarebytes
OCTOBER 22, 2021
This would mean Network Time Protocol (NTP) servers using the broken GPSD versions would think it’s March 2002 instead of October 2021. Authentication mechanisms such as Time-based One-Time Password (TOTP) and Kerberos also rely heavily on time. The same would happen in cases where authentication relies on cookies.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
MARCH 4, 2022
The following two issues added by CISA to the catalog are very old, they are dated back 2002 and 2004 respectively: CVE-2002-0367 – Microsoft Windows Privilege Escalation Vulnerability: smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator (..)
The State of Security
MAY 5, 2022
In 2002 I sat in a local bookstore in Jackson Hole, WY that offered a few Internet-connected computers for hourly use. After chatting with the owner and petting the resident store dog, I took a few guesses at the password protecting these computers. It took me maybe 10 attempts. It was, of course, some variation […]… Read More.
Krebs on Security
DECEMBER 18, 2020
7, 2020, the NSA said “Russian state-sponsored malicious cyber actors are exploiting a vulnerability in VMware Access and VMware Identity Manager products, allowing the actors access to protected data and abusing federated authentication.” 3, and said it learned about the flaw from the NSA. ” Indeed, the NSA’s Dec.
Security Boulevard
MAY 5, 2022
In 2002 I sat in a local bookstore in Jackson Hole, WY that offered a few Internet-connected computers for hourly use. After chatting with the owner and petting the resident store dog, I took a few guesses at the password protecting these computers. It took me maybe 10 attempts. It was, of course, some variation […]… Read More.
eSecurity Planet
DECEMBER 14, 2022
Another key update, Leonard noted, patches CVE-2002-41076 , a critical remote code execution flaw in PowerShell with a CVSS score of 8.5. “Without the patch, an authenticated attacker could escape the PowerShell Session Configuration and run unapproved commands on the target system,” he said.
Expert insights. Personalized for you.
188 
Let's personalize your content