The State of ATM Security: DMA Vulnerabilities are Lurking

Positive Labs presents the DaMAgeCard attack: SD Express runs over PCIe, so a malicious card can abuse the reader path for direct memory access (DMA) to the host — old threats, new form factor.

The FCC added foreign-made consumer routers to its Covered List over backdoor concerns: new models need Conditional Approval while a waiver protects existing devices until March 1, 2027.

RayV Lite is NetSPI's open-source, low-cost laser fault injection platform debuted at Black Hat 2024, showing laser-based chip attacks are now within reach of researchers, not just nation-states.

RayV Lite's creators explain low-cost laser fault injection: consumer green laser pointers leak 1064 nm infrared, and lower-power lasers trigger faults via longer exposure and clock-cycle alignment.

This guide covers practical chip decapsulation methods for home and amateur labs, including technique selection by packaging type without acid equipment, democratizing silicon-level reverse engineering.

NetSPI agents recap DEF CON 32: six zero-days found in ATM disk encryption software, General Paul Nakasone on US cyber strategy, and proactive security lessons from talks and workshops.