Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Lawful access to encrypted data: why is this so hard to do? [cert.at]

This blogpost is part of a series of articles on this topic. I will thus not do a full intro here, for the background see Ein paar Thesen zu aktuellen Gesetzesentwürfen Ein paar Gedanken zur „Überwachung verschlüsselter Nachrichten“ Chat Control vs. File Sharing Encryption vs. Lawful Interception: EU policy news A review of the “Concluding … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more

Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords [cert.at]

CERT.at gained access to a toolkit of an unknown threat actor targeting FortiCloud SSO bypass in Fortinet appliances (CVE-2025-59718/CVE-2025-59719). We are releasing under TLP:CLEAR key findings about likely post-exploitation goals of the attacker. The obtained exploit works only for the original vulnerability [1] and is not effective against patched devices. It is, however, known that … Read more