Appsec adventures

The article discusses the rapid advancement of artificial intelligence (AI) technologies and their transformative impact across various sectors. It highlights how AI is revolutionizing industries by enabling more efficient data processing, enhancing decision-making processes, and automating complex tasks. The piece emphasizes the integration of machine learning algorithms and neural networks in developing innovative solutions, leading to significant improvements in productivity and operational efficiency. Additionally, it explores the role of AI in driving technological innovation, fostering new business models, and creating opportunities for growth in the digital economy. https://substack.com/home/post/p-157686829%3Fsource%3Dqueue

On February 18, 2025, China initiated a global call for proposals to develop post-quantum cryptographic algorithms, aiming to establish national standards for encryption resistant to quantum computing threats. This initiative, led by the Institute of Commercial Cryptography Standards (ICCS) under the Chinese Cryptography Standardization Technical Committee, seeks international participation to evaluate algorithms based on security, performance, and implementation feasibility. Experts suggest that China's move reflects concerns over potential vulnerabilities in US-led encryption standards and a broader push for technological self-reliance. This development highlights the global competition in quantum-resistant encryption, with China pursuing independent standards to enhance its cybersecurity infrastructure. The urgency stems from the growing capabilities of quantum computers, which pose a direct threat to current encryption methods.  https://thequantuminsider.com/2025/02/18/china-la...

On February 17, 2025, Brazil established the Federal Biometric Service to oversee the issuance of the Carteira de Identidade Nacional (CIN), the country's biometric national identity card. The new law mandates that the service implement systems capable of performing both one-to-many and one-to-one biometric checks against its stored data. Fingerprint data must adhere to the NIST Fingerprint Image Quality (NFIQ) 2 standard, based on ISO/IEC 29794-4, while facial biometrics should comply with ICAO’s 9303 specification, aligning with ISO/IEC 29794-5. Additionally, the service is required to meet NIST’s FRTE evaluations and MINEX III fingerprint template interoperability standards. The law specifies acceptable false non-identification rates (FNIR) for various fingerprint types and mandates liveness detection for facial biometrics, with expectations for Level 1 testing against ISO/IEC 30107-3 for low-risk transactions and Level 2 for high-risk transactions. An implementation plan for th...

On February 18, 2025, HackRead reported on two critical vulnerabilities in OpenSSH, identified by the Qualys Threat Research Unit (TRU). The first vulnerability, CVE-2025-26465, affects the OpenSSH client and permits machine-in-the-middle attacks, potentially allowing attackers to impersonate legitimate servers and compromise SSH session integrity. This flaw exists regardless of the 'VerifyHostKeyDNS' setting and has been present since OpenSSH version 6.8p1. The second vulnerability, CVE-2025-26466, impacts both the client and server, enabling pre-authentication denial-of-service attacks that consume excessive system resources, leading to potential outages. Introduced in version 9.5p1, this issue persists up to version 9.9p1. Users are strongly advised to upgrade to OpenSSH version 9.9p2 to mitigate these vulnerabilities.  https://hackread.com/critical-openssh-flaws-expose-users-mitm-dos-attacks/

The Hacker News published an article on February 19, 2025, titled "The Ultimate MSP Guide to Structuring and Selling vCISO Services," providing a roadmap for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) to develop and market virtual Chief Information Security Officer (vCISO) services. Developed in collaboration with Jesse Miller, founder of PowerPSA Consulting, the guide addresses challenges in structuring, pricing, and selling vCISO offerings. It emphasizes evaluating current security services to formalize them into a vCISO package, assessing clients by industry, size, and security maturity to identify those who would benefit most, and structuring scalable service packages using frameworks and automation. The article highlights the importance of understanding client business drivers, evaluating their security leadership readiness, and aligning services accordingly to build a successful vCISO practice.  https://thehackernews.com/2025/02/the-...

In February 2025, InverseCos published an article titled "An Inside Look at NSA (Equation Group) TTPs from China’s Lens," which examines alleged cyber activities of the NSA's Equation Group, referred to by Chinese cybersecurity entities as "APT-C-40." The article aggregates insights from Chinese sources, including Qihoo 360, Pangu Lab, and the National Computer Virus Emergency Response Center (CVERC), focusing on the reported 2022 cyberattack on China's Northwestern Polytechnical University. According to these reports, the NSA's Tailored Access Operations (TAO) unit deployed over 40 unique malware strains to conduct data theft and espionage. Attribution methods cited include analysis of attack timings aligning with U.S. working hours and identification of American English language settings and keyboard usage. The article notes that these allegations remain unverified by independent sources and aims to share perspectives from Chinese cybersecurity researc...

In 2024, VulnCheck observed a 20% increase in publicly reported exploited vulnerabilities, identifying 768 CVEs compared to 639 in 2023. Notably, 23.6% of these were exploited on or before their public disclosure date, slightly down from 27% the previous year. The data indicates that exploitation can occur at any stage in a vulnerability's lifecycle. Initial exploitation reports came from 112 unique sources, including security companies, government agencies, non-profits, and product vendors. Monthly reporting volumes varied, with spikes linked to industry events and the onboarding of new reporting sources. These findings underscore the dynamic nature of vulnerability exploitation and the importance of timely disclosure.   https://vulncheck.com/blog/2024-exploitation-trends