THE KNOWLEDGE IS THE WORK.
Resources(82)
Canary Mail and MailCore2 library missing certificate validation check on IMAP STARTTLS
Rayd Debbas
CENSUS identified that the Canary Mail software in versions 3.20 and 3.21 (and possibly previous versions) is missing a certificate validation check when performing an IMAP connection configured with STARTTLS.
The Known Beacons Attack (34th Chaos Communication Congress)
George Chatzisofroniou
The recent key reinstallation attacks (KRACK) against the WPA2 protocol revealed how an adversary can easily eavesdrop, and in some cases tamper, a Wi-Fi connection secured by the WPA2 protocol. At the same time, Wi-Fi automatic association attacks achieve a similar result (man-in-the-middle position) not by attacking...