SEARCH
All Articles
Security Basics Prove Highly Effective at Stopping Account Takeovers
New Google research on account takeovers found that basic account hygiene can defeat the vast majority of attacks.
Stack Overflow Updates Breach Advisory With More Details
Kudos to Stack Overflow, for promptly notifying users as soon as it identified a breach and posting an update with more details as it learns them.
Code Repository Companies Pledge to Share Attack Data
Atlassian, GitHub, and GitLab pledged to continue the information sharing relationship they started while investigating the origins of the recent ransomware incident which affected BitBucket, GitHub, and GitLab users.
Attackers Are Hiding By Tampering With Encrypted Web Traffic
Attackers are increasing their use of "cipher stunting," a technique that randomizes their SSL/TLS signatures, to obscure the malicious web traffic and make it harder to detect.
Google Warns of Flaw in Some Titan Security Keys
A weakness in the Bluetooth pairing protocol in some Titan keys can leave them open to hijacking.
Decipher Podcast: Daniel Gruss
Dennis Fisher talks with Daniel Gruss of TU Graz about the Zombiload attack on Intel processors.
Intel, Tech Giants Release Updates to Fix New Chip Flaws
Like the earlier Meltdown and Spectre class of bugs, the new side-channel attacks ZombieLoad, RIDL, and Fallout take advantage of weaknesses in the processor's speculative execution feature to harvest secrets from system memory.
Microsoft Patches Legacy Windows to Prevent Worms
End-of-life doesn’t mean no longer a threat. Microsoft decided to release security updates for no longer supported Windows 2003 and Windows XP systems to fix a bug that could be exploited by a worm.
WhatsApp Flaw Used in Targeted, Not Widespread, Attacks
A WhatsApp vulnerability has reportedly been used in highly targeted attacks to install spyware on victims' phones.
Decipher Podcast: Alex Pinto
Alex Pinto from Verizon Enterprise joins Dennis Fisher to break down the 2019 Data Breach Investigations Report.
Digging Deep into the Verizon DBIR
The Verizon Data Breach Investigations Report isn’t just full of interesting data breach statistics; it also offers enterprise defenders valuable insights on the kind of real-world threats they should be worrying about.
Deciphering Swordfish and Three Days of the Condor
Dennis Fisher, Zoe Lindsey, and Pete Baker wade into the jumbled mess of Swordfish and then emerge into the sunlight of Three Days of the Condor.
FTC Pushes For Federal Privacy Law
The FTC is urging Congress to pass a broad federal privacy and security law--and allow the commission to be the enforcement authority for it.
Google Wants to Change How Cookies Are Used
Google I/O is a good place to announce a whole lot of new privacy features “coming soon." It is also a good place to bury plans to change how Google will handle HTTP cookies in Chrome.
FIN7 Attackers Still in the Water
The FIN7 attack group is still alive and well, despite arrests of some alleged members and intense attention from researchers and law enforcement.