Skip to content Skip to footer

Security Testing Is a Continuous Process, Not a One-Time Event

Software products evolve constantly. New features are added, dependencies change, interfaces expand, and deployment environments become more complex. Each change can create new security assumptions - and new opportunities for those assumptions to fail. That is why vulnerability assessment should not be treated as a one-time activity performed shortly before a product ships. Effective security…

Read More

IDOR’s in NCIA ANET v3.4.1

Written by: Andy Olchawa, Milenko Starcik Background The Advisor Network ("ANET") is a platform designed to monitor the connections between advisors and their advisees. It was initially developed by the Defense Digital Service to aid the USFOR-A and Resolute Support missions in supporting the Afghan government by providing a structure for training, advising, and assisting.…

Read More

How to crash a Spacecraft – DoS through Vulnerability in NASA CryptoLib v1.3.0

CryptoLib, a software library developed by NASA, implements the CCSDS Space Data Link Security Protocol (SDLS) to secure communications between spacecraft running the Core Flight System (cFS) and their corresponding ground stations. The library is essential in safeguarding the integrity and confidentiality of data exchanged during space missions.

Read More

Ground Control to Major Threat: Hacking the Space Link Extension Protocol

Space missions have increasingly been the subject of security breaches and satellite hacks. Most discussions revolve around direct communication and access to spacecraft through means such as Software Defined Radio. However, the reality is that this approach isn’t practical for most adversaries, as it requires substantial resources and is easily detectable due to the power…

Read More