Security news that informs and inspires

All Articles

2376 articles:

The Future is Encrypted

The move by Google and Mozilla to implement DNS over HTTPS in their browsers is drawing fire from ISPs, which rely on DNS visibility to gather user data.

Privacy

Online Privacy Act Would Create Federal Privacy Agency

A new privacy bill in the House of Representatives would create a new Digital Privacy Agency and punish companies for data misuse.

Privacy

Google Unveils OpenTitan Secure Chip Project

The OpenTitan chip project launched by Google and several partners will produce open-source designs for secure root of trust hardware.

Google, Hardware

Nikkei Hit By BEC Scam As Payments Get Larger

Japanese media conglomerate Nikkei is the latest victim of BEC scams, as companies continue to fall for this form of fraud.

Social Engineering, Phishing

DHS Warns of New North Korean Government Malware Hoplight

The DHS and FBI say North Korean-backed attackers are using a powerful new piece of malware known as Hoplight to infiltrate target machines.

Malware

Supply Chain Security Requires Knowing Who to Avoid

There are many ways to share threat indicators and vulnerability details, but no good way to share concerns about untrustworthy suppliers and vendors in the supply chain. That needs to change.

Supply Chain

WhatsApp Suit Against NSO Group Marks Beginning of an Era

The WhatsApp lawsuit against NSO Group may be a turning point in the way technology companies deal with surveillance vendors.

Privacy

Fancy Bear Attackers Target Anti-Doping and Sports Groups

The Russian attack group known as fancy Bear has been targeting anti-doping and sports organizations in advance of the 2020 Summer Olympics.

Microsoft, Apt

Johannesburg Hit With Major Ransomware Attack

The City of Johannesburg was hit with a ransomware attack that has compromised many of its municipal services.

Ransomware

Older Bugs in Software Add to Security Debt

In the rush to fix newer vulnerabilities, the older ones are left unaddressed. The resulting security debt increases the organization's risk of a breach, Veracode warned.

Application Security, Appdev, Appsec, Software Security, Software Development

Updated Gustuff Android Trojan Changes Tactics

A new version of the Gustuff Android banking trojan has emerged, this time with new communications capabilities and more credential-theft features.

Android

Malwarebytes Connects Magecart Group to Carbanak

Researchers have linked the Magecart group known for its supply-chain attacks to Cabanak, an advanced threat group.

Website Security, Supply Chain, Magecart

Firefox Now Blocks Social Media Trackers

In Firefox 70, Mozilla has added the ability to block trackers from Facebook, Twitter, and other social networks, as well as other new privacy enhancements.

Firefox

FTC to Developers: Get Consent

The FTC action against a developer of "stalking" apps emphasized that installing an app that hid its presence on the device and didn't notify the user what it was doing was against the law.

Privacy, Government, Appdev

Microsoft’s Secured-core PC Takes Aim at Firmware Attacks

Microsoft's Secured-core PC initiative is a partnership with OEM partners (including HP and Dell), silicon vendors (such as Intel, AMD, and Qualcomm) to provide deeply integrated hardware, firmware and software that can withstand firmware-based attacks.

Hardware, Windows, Microsoft, Firmware Security