SEARCH
All Articles
Digital Security Exchange Forges Connections to Protect Those in Need
The Digital Security Exchange is helping to connect at-risk groups with security experts who can help protect them.
LinkedIn CISO: Bringing Diversity into Security with the Stories We Tell
Everyone has their own story about who they are and what they do. LinkedIn CISO Cory Scott describes how to use people's personal narratives to put together security teams that have a diverse set of skills, problem-solving, and experiences.
AMD Releases Spectre Mitigations
AMD has released mitigations for the Spectre vulnerability that affects some of its processors.
WebAuthn Offers a Glimpse Into a Potentially Password-Less Future
The WebAuthn specification from the W3C could make password-free authentication a reality in the near future.
In the Cellular ‘Cesspool,’ Spies and Crooks Have Their Way
The Internet is a hostile environment for many users, and cellular networks, unfortunately, are simply an extension of that.
How a Researcher Found the Panera Data Leak
Security researcher Dylan Houlihan discovered an issue that leaked data from the Panera Bread site, including customer names, phone numbers, and other information.
Web Application Bugs, From Disclosure to Exploit
Just because a vulnerability exists doesn’t automatically mean it will get exploited. It turns out the popularity of the software matters, but so does where the vulnerability information is published.
Facebook Moves to Restrict Access to User Data
Facebook is making privacy changes designed to restrict apps' access to user data.
Here Come the Malicious Cryptominers
Malicious cryptominers are taking over for ransomware, thanks to quicker ROI and less attention from law enforcement.
Here’s Why Chrome is Scanning Your Computer for Malware
Recent reports have highlighted Chrome Cleanup, a lesser-known security feature in Chrome that looks for potentially harmful software that can potentially hijack the web browser. While good for user security, Google should make information about the tool easier to understand and easier to find.
Empathy for Security Victims, Not Blame
Whenever there is a breach or security incident, the infosec quarterbacks are out in full force, speculating what went wrong and pointing out what "should" have been done. Empathy is needed to share what worked and what didn't, not smug superiority. Security is for everyone.
Data Brokers, Social Media, User Privacy
Facebook is severing ties with data brokers, those companies that sit on piles of user data such as voter rolls, property records, purchase histories, and other databases. It's bad news for advertisers, but will it improve user privacy?
BranchScope: Another Processor-Based Attack
Much like Spectre, BranchScope is an attack that focuses on the processor's branch prediction system. That doesn't mean the processors are hopelessly vulnerable. It just means that as more researchers start exploring various features in modern CPUs, more issues will be found.
New DIY Method Lets Researchers Recover Data from Hardware Chips
Many Internet of Things manufacturers handled security by disabling hardware debugging and locking down the firmware. Security researchers need to bypass these barriers so that they can find and help fix the actual security issues. A researcher talks about a technique gets researchers down to the silicon level.
Washington, Facebook, and the Privacy Reckoning
Federal legislators are asking Facebook, Google, and Twitter executives to come to Washington to discuss privacy concerns.