SRLabs research suggests that security vulnerabilities remain unpatched for many Ethereum blockchain participants for extended periods of time, putting the blockchain ecosystem at risk.
The blockchain ecosystem has a patch problem Read More »
Security scanners and tools are usually built around experts. But cyber security effects the entire organization, so the expectations towards monitoring and communicating hackability have evolved. KPIs like Autobahn Securitys’ Hackability Score can help bridge this gap.
KPIs in Cyber Security: Measuring Hackability Read More »
Travel bookings worldwide are maintained in a handful of systems. The three largest Global Distributed Systems (GDS) Amadeus, Sabre, and Travelport administer more than 90% of flight reservations as well as numerous …
Legacy booking systems disclose travelers’ private information Read More »
Banks are known for their strong security efforts and better-than-average protection from hacking. As we discussed previously when introducing a metric to compare the Hackability of different organizations, banks are among the top three …
Banking regulation has an effect on Hackability Read More »
UPDATE December 17, 2019: Attacks still possible Six weeks after first publicly discussing the Smart Spies attacks, we performed some retests to see whether Google and Amazon implemented sufficient checks to mitigate the attacks.
Smart Spies: How Alexa and Google Home expose users to phishing and eavesdropping Read More »
We dug deeper into the vulnerability and patch for CVE-2020-9054, a pre-auth command injection in ZyXEL NAS devices. We found that the patched vulnerability was still exploit-able due to incomplete patching.
Incorrectly patched ZyXEL vulnerability becomes zero-day again Read More »
Learn how a team at SRLabs optimized a vulnerability in the development software Telerik UI from 2017 to create a practical exploit. The research details the optimization techniques deployed, which can also be used for developing other exploits.
Achieving Telerik Remote Code Execution 100 Times Faster Read More »
Learn about four best practices to improve for Vulnerability Management: 1) Data integration 2) Asset detection 3) Vulnerability aggregation and 4) Prioritization.
4 best practices to bring your vulnerability management to the next level Read More »
We must be able to trust payment systems: Payment terminals have conquered nearly every retail outlet and payment cards are as pervasive as cash. Major parts of this critical payment infrastructure, however, rely on proprietary protocols …
Outdated payment protocols expose customers and merchants Read More »
