Post-quantum algo ‘SIKE’ dead: Did math geeks find key-encap back door? - ReversingLabs

NIST nixes PQC postulant: Here’s more on NIST’s search for post-quantum cryptography (PQC): This week, is it in trouble? Breathless headlines would have you believe it, because researchers found a way to easily break the SIKE key encapsulation algorithm.

… @CosicBe researchers Wouter Castryck and Thomas Decru are eligible for a chunky #BugBounty.

In this week’s #SSBlogwatch we’re glad to see the system is working, not broken.

For @ReversingLabs’ @SecuredSoftware: https://t.co/lp9Ar4HrHB

— @Richi 🤓 Jennings (@RiCHi) August 4, 2022

FAIL: Nomad DeFi Bridge ‘Loses’ $190M of Worthless Tokens - Security Boulevard

I’ve Got a Bridge to Sell You: Cryptocurrency startup Nomad allowed thieves to steal all its fake money. It’s the latest dangerous DeFi API vulnerability in a long line of such failures.

Stupid #exploit or cynical #RugPull?

In today’s #SBBlogwatch, we take a closer look.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/LR76x5NJLp #blockchain #bridge #Ethereum #Moonbeam

— @Richi 🤓 Jennings (@RiCHi) August 2, 2022

Solved: Subzero Spyware Secret — Austrian Firm Fingered - Security Boulevard

DSIRF ‘is’ PSOA: MSFT—DSIRF GmbH codenamed ‘Knotweed’ by Microsoft and RiskIQ. This unknown Austrian company is accused of selling the powerful, pernicious spyware Subzero.

What can be done?

In today’s #SBBlogwatch, we count the ways.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/UO0oFKbT3d

— @Richi 🤓 Jennings (@RiCHi) July 29, 2022

Google ‘Delays Making Less Money’ — Third-Party Cookie Ban on Hold - Security Boulevard

#AdTech Digs in its Heels: Google’s plan to kill third-party cookies is delayed—yet again. It was going to be this year, then it was pushed back to next year and now we’re told it’ll be 2024 at the earliest.

It’s probably not surprising.

In today’s #SBBlogwatch, we can’t see Google’s motivation to move fast (or at all).

At @TechstrongGroup’s @SecurityBlvd: https://t.co/MKO45zhb4Q

— @Richi 🤓 Jennings (@RiCHi) July 28, 2022

Carbon aims to fix C++ memory safety (and other big flaws) - ReversingLabs

C++ WG no longer apt? C++ sucks: It’s no good on memory safety, it’s unergonomic, has far too much legacy cruft and suffers from gatekeepers who won’t move with the times. Enter: Carbon.

There’s nothing like a bold goal.

In this week’s #SSBlogwatch we wonder if the world needs yet another “better C.”

For @ReversingLabs’ @SecuredSoftware: https://t.co/YGO6R66UbT

— @Richi 🤓 Jennings (@RiCHi) July 28, 2022