security vulnerability

‘Trojan Source’ Bug Threatens the Security of All Code (Krebs on Security)

2021/11/01 : Brian Krebs explains the vulnerability “Trojan Source” in his blog.

Read more

Error in the source code discovered and rectified (Swiss Post press release)

2019/03/12: Swiss Post official press release reacting to the vulnerability found by security researchers during the public intrusion test on their e-voting system.Read more

PGP und S/MIME abschalten (Golem article)

2018/05/14: Article on the disclosed vulnerabilities in OpenPGP and S/MIMERead more

PGP und S/MIME: E-Mail-Verschlüsselung akut angreifbar (Heise Security article)

2018/05/14: Article on the EFAIL vulnerabilities concerning OpenPGP and S/MIME encrypted emailRead more

Was the Efail disclosure horribly screwed up? – A Few Thoughts on Cryptographic Engineering (blog post)

2018/05/17: Matthew Green thoughts on the EFAIL vulnerabilities disclosure, its handling and the future of PGPRead more

New finding in the source code (Swiss Post article)

2019/03/25: Swiss Post article reacting to the second vulnerability report in its e-voting system. Report: https://cva.unifr.ch/content/how-not-prove-your-election-outcome-...Read more

Gravierender Mangel am E-Voting-System der Post entdeckt (Republik article)

2019/03/12: Republik article about the vulnerability reported by  security researcher in the Swiss Post e-voting systemRead more

Release of source code leads to discovery of flaw in Swiss Post’s new e-voting system (Federal Chancellery press release)

2019/03/12: Federal Chancellery official press release about the flaws found in the Swiss Post e-voting system. The Federal Chancellery calls for Swiss Post to review and improve it's system's security process and "will review the relevant certification and authorization procedures." The...Read more

#EFail - the security industry and the importance of nuance (HackDefense article)

2018(05/14: Article criticizing the handling of the EFAIL vulnerabilities disclosureRead more

Subscribe to security vulnerability