PoC repo for abusing Microsoft-signed rdpbase.dll as a BYOK RC4 primitive, with Python encrypt/decrypt scripts.
trending75
01 02 Need a GUI for ChipWhisperer SCA and glitching, plus notebooks, HTTP API, and an MCP server? Here it is.03 Blog post on hotword detection over encrypted audio, with a browser demo and a peek at Belfort's HEIR-backed eML stack.04 ChipWhisperer Studio tour, same UI videoed via simulator and Playwright, plus chapter clips and captions for the curious.05 Explains client-side vs server-side encryption, from key custody to envelope encryption, with the usual security/usability tradeoffs.06 Paper on CounterSteer, an activation-steering defense against indirect prompt injection, because tool outputs now need airbags.07 IETF stalls the standalone ML-KEM TLS draft, while RFC 10024’s X25519MLKEM768 hybrid keeps marching on.08 Repo documents tlscsp.dll as an RC4 primitive, patching its key in memory before LsCsp_EncryptHwid.09 BSI says no practical break on recommended Classic McEliece params, then still tells you not to start new projects with it.10 BSI says Classic McEliece still looks unbroken at recommended parameters, but new deployments should hit pause anyway.11 YouTube video on BLAKE3, a fast parallel hash, with corrido flair for the usual cryptography hype cycle.12 BSI says Classic McEliece is still unbroken at recommended params, but new deployments are now a bad bet.13 So what breaks when Ubuntu swaps GNU PGP for a Rust clone in package verification?14 What Tezos is testing here: a public testnet swapping out quantum-vulnerable consensus bits, DAL, and confidential txns.15 GitHub repo for an educational kleptography lab, with Streamlit demos and a Young-Yung DH backdoor, because trust is hard.16 BSI PDF on recent Classic McEliece developments and PQC security notes, for when lattice fatigue sets in.17 BSI technical note on recent Classic McEliece developments, because even PQC candidates need paperwork.18 [tl;dr sec] #348 - Google's PageBreak Scanner, Perplexity's Agent Security Tool, Defending Agentically tldrsec.comThe scary bit is agentic defense, this issue also rounds up PageBreak, Numbat, CiliumHound, and AppSec/cloud bits.19 Forbes says the new twist is using AI to test PQC deployments and spot weak crypto before quantum hype does.20 A classifier beats LLMs at CWE labels, then feeds them to a repair agent that ships safer code faster.21 Ubuntu blog demoing realtime fraud scoring with an open-weight LLM, KServe, vLLM, AWQ, and MicroK8s.22 What breaks first when quantum arrives, and which PQC families replace RSA/ECC? NSA's primer does the usual lattice/hash tour.23 Reconstruction and break of a 1809 homophonic cipher letter to Marmont, with scripts and a solution pack. Old wars needed homework.24 Rust service that turns Postgres into Iceberg via initial copy, logical replication, and the usual durable recovery circus.25 Public benchmark board comparing OpenFHE 1.4.2, 1.5.1, and 1.6.0 on the same sign workload.26 27 Security advisory on an MCP Python SDK OAuth redirect bug that can leak client secrets and PKCE bits, because auth is fun.28 Formalizes the too-late-to-slash problem: validators can wait until punishment is censorable, so more bonded stake stops buying security.29 ZK Podcast episode with Aumasson on post-quantum timelines, RSA/ECC cracks, and AI doing both sides of cryptanalysis.30 GL cuts ciphertext matrix mult from 38 min to 12.67 s in this benchmark, on matched hardware and params.