8 ms·
Microsoft patches Windows zero-day used to drop ransomware
- isaacfrond 4y agoEon's ago I found the same bug in a security library that we were using. A signature was fully verified, except to verify that it corresponded to the text being signed. You could copy any old signature, cut and paste it under a new text and the library would happily accept it.