security vulnerability

Trojan Source: Invisible Vulnerabilities (Boucher and Anderson article)

2021/10/30 : Nicholas Boucher and Ross Anderson "present a new type of attack in which source code is maliciously encoded so that it appears different to a compiler and to the human eye." This new threat has been called 'Trojan Source'.

Read more

‘Trojan Source’ Bug Threatens the Security of All Code (Krebs on Security)

2021/11/01 : Brian Krebs explains the vulnerability “Trojan Source” in his blog.

Read more

SCRTSA tweet on the Swiss Post e-voting system source code release

HTML MAils have no Security Concept and are to blame (Hanno's blog)

2018/06: Hanno Böck's toughts and opinions on HTML mails and its roles in the EFAIL vulnerabilitiyRead more

Statement on Efail research (Gpg4win)

2018/05/17: Gpg4win statement regarding the EFAIL vulnerabilities and its media coverageRead more

EFF : Attention PGP Users New Vulnerabilities Require You To Take Action Now (EFF article)

2018/05/14: EFF statement regarding the newly disclosed vulnerabilities affecting PGP and S/MIME usersRead more

Email Is Dangerous (The Atlantic article)

2018/05/21: Article on who is concerned by the EFAIL vulnerabilities and why email, in general, isn't securedRead more

Reaction to SwissPost announcement of their source code correction (tweets)

Critical Flaws in PGP and S/MIME Tools Can Reveal Encrypted Emails in Plaintext (TheHackerNews article)

2018/05/14: Article on the EFAIL vulnerbilities concerning OpenPGP and S/MIME encrypted emailRead more

EFAIL bundle

Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels
EFF : Attention PGP Users New Vulnerabilities Require You To Take Action Now (EFF article)
PGP und S/MIME abschalten (Golem article)
Major eFail Vulnerability Exposes PGP Encrypted Email -- UPDATED (Forbes article)
Verschlüsselte E-Mails sind nicht sicher (Süddeutsche article)
Critical Flaws in PGP and S/MIME Tools Can Reveal Encrypted Emails in Plaintext (TheHackerNews article)
Efail or OpenPGP is safer than S/MIME (W. Koch email)
#EFail - the security industry and the importance of nuance (HackDefense article)
Encrypted Email Has a Major, Divisive Flaw (Wired article)
S/MIME artists: EFAIL email app flaws menace PGP-encrypted chats (The Register article)
PGP und S/MIME: E-Mail-Verschlüsselung akut angreifbar (Heise Security article)
No, PGP is not broken, not even with the Efail vulnerabilities (Protonmail)
A unified timeline of Efail PGP disclosure events
Efail: What A Disclosure FAIL That Was! (RBS article)
Statement on Efail research (Gpg4win)
Email Is Dangerous (The Atlantic article)
efail: Outdated Crypto Standards are to blame (Hanno's blog)
Die wichtigsten Fakten zu Efail (Golem article)
What “Efail” Tells Us About Email Vulnerabilities and Disclosure (Lawfare article)
How To Turn PGP Back On As Safely As Possible (EFF article)
HTML MAils have no Security Concept and are to blame (Hanno's blog)
Was the Efail disclosure horribly screwed up? – A Few Thoughts on Cryptographic Engineering (blog post)
Encryption? This time it'll be usable, Thunderbird promises (The Register article)
Sebastian Schinzel Tweet about EFAIL vunlerability
Major eFail Vulnerability Exposes PGP Encrypted Email -- UPDATED (Forbes article)

2018/05/14: Article reviewing the story of the EFAIL vulnerabilities concerning PGP encrypted emailRead more

Sarah Jamie Lewis Tweets on vulnerabilities in Swiss Post e-voting system

Subscribe to security vulnerability
Need help with PECE?
Join the PECE Slack channel