There is a side-channel attack against YubiKey access tokens that allows someone to clone a device. It’s a complicated attack, requiring the victim’s username and password, and physical access to their YubiKey—as well as some technical expertise and equipment.
Still, nice piece of security analysis.
<
p id=”powered”>Sidebar photo of Bruce Schneier by Joe MacInnis.
Subscribe to get the latest posts sent to your email.
One of the most challenging aspects of working in cybersecurity can be the deceptively simple act of finding the best job that suits your skillset and best fits the employer’s
Drata, a company offering continuous security and compliance automation technology, has acquired Harmonize.io, an intelligent user governance platform that integrates with business systems like HR and IT. The move serves
List of Old NSA Training Videos The NSA’s “National Cryptographic School Television Catalogue” from 1991 lists about 600 COMSEC and SIGINT training videos. There are a bunch explaining the operations
