Hello fellow Applied Cryptography students! Cynthia, David, Maheen, Oscar, and I would like to introduce our teaching aide on e-voting to you! This interesting and cutting-edge application of cryptography will help you understand how the concepts we learned in class can solve fascinating problems in the real world. You will also get a glimpse of …
Category Archives: Uncategorized
IS YOUR PHONE LISTENING?
Phones are a very core part of our everyday lives, but most people believe they are more secure than they actually are. Using SS7 I would like to prove to you that your phone may actually be listening to you. What is SS7 and how does it work? Signalling System No. 7 (SS7) is a …
Magento and Adobe Commerce Stores Are Victims of the CosmicSting Attack.
Introduction Cybersecurity researchers have discovered evidence of a large-scale attack targeting Adobe Commerce and Magento online retailers. Roughly 5% of these online marketplaces have been compromised by the so-called “CosmicSting” security holes. With a CVSS [Common Vulnerability Scoring System (CVSS) ] severity rating of 9.8, CVE-2024-34102 is one of the most serious vulnerabilities that have …
Continue reading “Magento and Adobe Commerce Stores Are Victims of the CosmicSting Attack.”
IoT and Security
The days of smart living is now! Its not in the past nor in the future, we are living smart! I can conveniently connect with devices with a sound of my voice, a tap of my finger or phone, a wave of my hand and so many interesting and easy ways! Isn’t that smooth?!… sure, …
Ransomware Attack on University Medical Center (UMC)
Introduction: At present, the healthcare system has become one of the most popular targets for cybercriminals. Cyberattacks on hospitals as well as on medical centers have increased drastically in recent years. On 26 September 2024, the University Medical Centre (UMC) Health System in Lubbock, Texas, was hit by a serious ransomware attack. This attack affected …
Continue reading “Ransomware Attack on University Medical Center (UMC)”
Breaking The Cryptosystem of Auto Keyless Entry, Canada Auto Thefts Surge.
Imagine a sunny day setting in a coffee shop, peacefully sipping your Frappuccino drink, then someone next to you hijacks your car key fob without even touching it or talking to you. A recent statistic by the Insurance Bureau of Canada (IBC) shows that auto theft insurance claims spiked to $1.5 billion in 2023 [3]. …
Continue reading “Breaking The Cryptosystem of Auto Keyless Entry, Canada Auto Thefts Surge.”
The Ethereum Mailing List Breach: A Wake-Up Call for Crypto Security
In July 2024, a massive incident occurred related to Ethereum’s official mailing list. The community faced a security challenge when a phishing email was sent to its subscribers which involved leaking sensitive information about the users. The attackers targeted the mailing list as it is the Key communication path for the Ethereum community. They decided …
Continue reading “The Ethereum Mailing List Breach: A Wake-Up Call for Crypto Security”
Park’N Fly Data Breach
Introduction Park’N Fly is a popular airport parking service that experienced a data breach between July 11 to July 13, 2024. This company operates in several cities in Canada such as Ottawa, Montreal, Halifax, Edmonton, Toronto, Winnipeg, and Vancouver. The level of compromise was announced much later in August 2024, disclosing that about 1 million …
Post Quantum Cryptography: Kyber for Dummies
On August 13th 2024 NIST published the standards FIPS 203 (Kyber), FIPS 204 (Dilithium) and FIPS 205 (SPHINCS+) which are all quantum resistant algorithms that will soon replace those currently in use. The Kyber standard is a key encapsulation scheme which uses public key enabling and will replace the Diffie Hellman exchange. Dilithium and SPHINCS+ …
Continue reading “Post Quantum Cryptography: Kyber for Dummies”
A Passwordless AND Keyless Future
What is Privileged Access Management (PAM)? Privileged Access Management (PAM) is a package of cybersecurity strategies and access management tools utilized for controlling, monitoring, and safeguarding users with privileged access permissions.[3] A PAM system ensures your computers have a secured network that is able to decrease operational complexity and protects important resources such as data, …
