“Australia’s spies and cops want ‘accountable encryption’ - aka access to #backdoors”

“he outlined an argument that a dynamic tension exists between security and technology, Burgess added “encryption protects our #privacy and enables our #economy…and creates safe spaces for violent #extremists to operate, #network and #recruit.” #Burgess labelled encryption “clearly a good thing, a positive for our democracy and our economy” because it “protects #privacy, it enables communications and transactions.” But he noted it also provides #criminals with #anonymity, which is why #Australia has laws that make it possible to access encrypted messages.”

#ASIO / #encryption <https://www.theregister.com/2024/04/25/asio_afp_accountable_encryption/>

Australia’s spies and cops want ‘accountable encryption’ - aka access to backdoors

And warn that AI is already being used by extremists to plot attacks

^{Simon Sharwood (The Register)}

#CVE-2024-20356: #Jailbreaking a #Cisco appliance to run #DOOM

In this adventure, the Cisco #C195 device family was jailbroken in order to run unintended code. This includes the discovery of a vulnerability in the #CIMC body management controller which affects a range of different devices, whereby an authenticated high privilege user can obtain underlying root access to the server’s #BMC (CVE-2024-20356) which in itself has high-level access to various other components in the system. The end goal was to run DOOM – if a smart fridge can do it, why not Cisco?

source: https://labs.nettitude.com/blog/cve-2024-20356-jailbreaking-a-cisco-appliance-to-run-doom/

#software #security #bug #network #game #news #vulnerability #exploit #hack #hacker

CVE-2024-20356: Jailbreaking a Cisco appliance to run DOOM - LRQA Nettitude Labs

Exploiting remote code execution in Cisco's CIMC management system and jailbreaking the device to run untrusted code

^{Aaron Thacker (LRQA Nettitude Labs)}