In the context of an academic collaboration between the CSecLab and Eurecom, Antonio Ruggia and Alessio Merlo discovered - together with Simone Aonzo, Dario Nisi and Andrea Possemato from EURECOM - a set of novel vulnerabilities allowing to mount a phishing attack to all applications and Android versions developed so far.
Link at a pre-print verion of the paper: https://www.s3.eurecom.fr/docs/eurosp23_inotify.pdf
Link at the attack blog-post: https://www.s3.eurecom.fr/post/2023/03/06/android-notify-me-when-it-is-time-to-go-phishing/
Link at the video POC of the attack: https://www.youtube.com/watch?v=k3FO-Tews04

From 20 to 24 June, members of the CSec Lab will participate in the most important italian conference about Cybersecurity, held in Rome.
Visit the conference's site for more info: https://itasec.it

The 7th edition of the IEEE European Symposium on Security and Privacy has ended with great success in our city of Genova. 

Alessio Merlo, Luca Verderame and Marina Ribaudo took part in the organization committee as General Chair and Local Chairs respectively.

Visit the conference's site for more info on this closed edition and the accepted papers: https://www.ieee-security.org/TC/EuroSP2022/index.html

Andrea Romdhana et al. won the best paper award at ICST22 with "IFRIT: Focused Testing through Deep Reinforcement Learning".

Link at the news: https://twitter.com/tanja_vos/status/1512342124590686211?s=20