Encryption – AACYBER

CVE-2024-31497 – PuTTY Key Recovery Attack.

Hello World! Recently a vulnerability has been discovered in everyone’s favourite terminal emulator.(That is, if you dont use Solar-PuTTY.) The run down in a bitesize chunk is that a faulty implementation of cryptographic techniques, leads to an ability to recover a users private key. Specifically a NIST P-521 private key, potentially giving an attacker the abilityContinue reading “CVE-2024-31497 – PuTTY Key Recovery Attack.”

Hertzbleed (CVE-2022-23823 and CVE-2022-24436)

Hello World! On June 14th 2022, a new family of side-channel attacks, frequency based, were disclosed to the public. The method is quite technical and above my level of understanding in places, additionally there isn’t anything the majority of people need to do. BUT! There is a way this has potential to affect many peopleContinue reading “Hertzbleed (CVE-2022-23823 and CVE-2022-24436)”