We offer Code Signing and Certificate Lifecycle Management products along with PKI, HSM, and Other Encryption platform Consulting, Support, and Training.
Prosper, TX
Joined June 2018
- Tweets5.1K
- Following881
- Followers503
- Likes58
Encryption Consulting LLC retweeted
‼️ BREAKING: New research shows you can copy any signed GitHub commit into a second one that looks identical, without the author's secret key, creating a distinct commit with an identical tree, identical metadata, a valid signature, and a "Verified" badge from GitHub.
On GitHub, a green "Verified" badge is supposed to mean two things: a trusted author signed it, and its ID is a one-of-a-kind fingerprint for that exact code. A new Carnegie Mellon preprint from Jacob Ginesin says the second promise, the unique fingerprint, does not hold.
Why it matters: security teams and package systems (behind tools like Go, Nix, and GitHub Actions) trust that ID as a unique handle for code. Block or pin the "bad" version, and an attacker can re-issue the same signed code under a fresh, still-verified ID that slips past. The author says Git and GitHub have not fixed it.
PoC: github.com/JakeGinesin/git-c…
Encryption Consulting LLC retweeted
🟥 CVE-2025-49596, CVSS: 9.4 (#Critical)
#MCP Inspector version < 0.14.1
#Vulnerability allows remote code execution due to lack of authentication between the Inspector client and proxy.
#CyberSecurity #CVE #RemoteCodeExecution #MCPInspector
github.com/modelcontextproto…
Encryption Consulting LLC retweeted
New Secure Boot flaw lets attackers install bootkit malware, patch now - @LawrenceAbrams
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
Microsoft has discovered post-compromise exploitation of CVE 2025-29824, a zero-day elevation of privilege vulnerability in Windows Common Log File System (CLFS), against a small number of targets. msft.it/6019qIVV9
Encryption Consulting LLC retweeted
Oracle reportedly confirms Oracle Cloud breach to customers - @serghei
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
Warning over privacy of encrypted messages as Russia targets Signal Messenger bit.ly/41mYxdc
Encryption Consulting LLC retweeted
Microsoft overcomes quantum barrier with new particle bit.ly/3QpTEto
Encryption Consulting LLC retweeted
Apple withdraws encrypted iCloud storage from UK after government demands ‘back door’ access bit.ly/4i9Y9UN
Encryption Consulting LLC retweeted
Apache fixes remote code execution bypass in Tomcat web server - @billtoulas
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
US considers banning TP-Link routers over cybersecurity risks - @serghei
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
Electrica Group, a key player in the Romanian electricity distribution and supply market, is investigating a ransomware attack that was still "in progress" earlier today.
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
QR codes bypass browser isolation for malicious C2 communication - @billtoulas
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
Explore the vast world of Endless Legend and choose your faction for an epic survival journey. - hackernoon.com/how-to-choose… #endlesslegend #fantasygaming
Encryption Consulting LLC retweeted
New Rockstar 2FA phishing service targets Microsoft 365 accounts - @billtoulas
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
Hackers abuse Avast anti-rootkit driver to disable defenses - @billtoulas
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
🚨 Exciting News! 🚨
wolfSSL is the first to achieve the SP800-140Br1 #FIPS 140-3 Validation Certificate! The wolfCrypt module is now FIPS 140-3 validated, Certificate #4718! It’s time to move to FIPS 140-3!
Learn more about FIPS 140-3: wolfssl.com/fips-140-3-annou…
Encryption Consulting LLC retweeted
United States officials have disclosed the details of a broad cyber espionage campaign by Chinese state-sponsored actors.
hubs.li/Q02YwQZR0
Encryption Consulting LLC retweeted
Microsoft 365 Admin portal abused to send sextortion emails - @LawrenceAbrams
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
American car rental giant Avis disclosed a data breach after attackers breached one of its business applications last month and stole customer personal information - @serghei
bleepingcomputer.com/news/se…
Encryption Consulting LLC retweeted
I've posted my @ThatConference slides on How Downloads Work.
I started out worried that I couldn't fill an hour but finished talking at warp speed to finish on time.
I'll try to upload the audio in the next few days.
textslashplain.com/2024/01/2…