<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>svarthatt</title>
  <link href="https://svarthatt.se/"/>
  <link rel="self" href="https://svarthatt.se/feed.xml"/>
  <id>https://svarthatt.se/</id>
  <updated>2026-05-31T00:00:00+00:00</updated>
  <author><name>Oliver</name></author>
  <entry>
    <title>EU-projekt · Celtic-NEXT – CISSAN</title>
    <link href="https://svarthatt.se/projekt/cissan/"/>
    <id>https://svarthatt.se/projekt/cissan/</id>
    <updated>2026-05-31T00:00:00+00:00</updated>
    <summary>Ett internationellt projekt som ska utveckla och demonstrera nya metoder för att skapa säkrare nätverk för energisektorn.</summary>
  </entry>
  <entry>
    <title>CVE-2025-61482 – privacyIDEA Authenticator OTP Seed Disclosure</title>
    <link href="https://svarthatt.se/cve/cve-2025-61482-pulling-otp-secrets-from-privacyidea-authenticator/"/>
    <id>https://svarthatt.se/cve/cve-2025-61482-pulling-otp-secrets-from-privacyidea-authenticator/</id>
    <updated>2025-10-15T20:24:00+00:00</updated>
    <summary>privacyIDEA Authenticator for Android 4.3.0 lets a local attacker with root recover enrolled OTP/TOTP/HOTP seeds by hooking the app&#x27;s cryptographic functions at runtime.</summary>
  </entry>
  <entry>
    <title>CVE-2025-61481 – MikroTik RouterOS and SwOS WebFig Default HTTP Configuration Allows Credential Interception</title>
    <link href="https://svarthatt.se/cve/mikrotik-swos-cve-2025-61481/"/>
    <id>https://svarthatt.se/cve/mikrotik-swos-cve-2025-61481/</id>
    <updated>2025-10-15T20:15:00+00:00</updated>
    <summary>MikroTik RouterOS and SwOS ship WebFig with HTTP enabled and no redirect to HTTPS, so admin credentials cross the network in cleartext after a factory reset.</summary>
  </entry>
</feed>
