Vulnerabilities

Cryptography, Malware, Uncategorized, Vulnerabilities March 29, 2023

Python Scripts to Verify your Windows Drivers are all signed.

Current malware is exploiting endpoints by using DLL driver link libraries to load malware from the hardware layer into the Operating System. Use the following python script to verify if your PC is running unsigned…

Computer Forensics, Cryptography, DNS Security, Hacking, Malware, National Security, Privacy, Public Safety, Vulnerabilities March 15, 2023

Supply Chain Vulnerability Analysis Suggests Computers are Being Tampered with in China prior to shipment to the U.S.

Last month, I discussed the analysis I performed on a $99 ASUS laptop purchased from Micro Center. I analyzed this ASUS laptop as part of my investigation into supply chain cyber security. My analysis of…

Vulnerabilities August 28, 2018

Neubecker to Present on Electric Grid Vulnerabilities MadIoT

Lee Neubecker, President of Great Lakes Forensics was asked to present on the topic of IoT devices and how they could contribute to a Catastrophic Cyber attack on the Nation’s electric grid. Neubecker will present…

Vulnerabilities March 14, 2018

Researchers reveal backdoor on many AMD Processor Chips

AMD Backdoor Bug on Chip AMD Chip Vulnerabilities announced yesterday allegedly have backdoors on many Ryzen, Epyc, Ryzen Pro and Ryzen Mobile lines of processors that all use an important core system component that AMD…

Vulnerabilities March 7, 2018

Equimelt Vulnerability Explained in More Detail

My original post last week detailing what I call the Equimelt Vulnerability caused somewhat of a stir, as well as some healthy debate. As such, I would like to further clarify some of my key points…

Vulnerabilities February 24, 2018

Advanced Persistent Threats Rely Upon Weak Encryption

Why it is Important to Stop Using Weak Encryption The United States of America National Security Agency Information Assurance Department (iad.gov) issued an advisory to government and governmental contractors warning of the risks of advanced…

Vulnerabilities February 21, 2018

Intel 10K Report Discloses Meltdown & Spectre Related Vulnerabilities

Intel Discloses Spectre & Meltdown Details Just this past week, Intel released its 10K annual report. The following comes from page 66 of their 2017 Annual 10K released February 15th, 2018. Intel is now subject…

Vulnerabilities January 4, 2018

Intel CEO Cashes Out $24 Million in Stock Before Wide Spread Vulnerabilities are Acknowledged

This week news reports disclosed two earth shattering vulnerabilities dubbed as Meltdown and Spectre, that collectively impact almost all processors made in the last 20 years. The Meltdown vulnerability already has exploit tools available for…

Vulnerabilities December 11, 2017

Security Researcher Discovers HP Synaptics Driver Key Logging Capabilities

Security researcher Michael Myng recently disclosed that the Synpatics touchpad driver SynTP.sys used in many HP and Compaq laptops and notebooks has the capability to log all keystrokes on the local machine if a registry…