Facebook provided an update to a previously disclosed incident involving insecurely storing “tens of thousands” of Instagram users’ passwords on internal servers in clear text. Facebook now says that “millions” of Instagram accounts are now impacted.
Facebook says Millions of Instagram passwords stored in clear text Read More »
Multiple VPN applications are vulnerable to not properly encrypting sensitive data and insecurely storing session cookies.
VPN applications exposed to critical vulnerability Read More »
The Federal Information Processing Standards (FIPS) has issued the FIPS 140-3 Security Requirements for Cryptographic Modules.
FIPS 140-3: Security Requirements for Cryptographic Modules Read More »
Mozilla just introduced Firefox Send, a free encrypted file transfer service that allow users to safely and simply share files via any browser.
Firefox Send – a new free encrypted file transfer service Read More »
The NIST standard, SP 800-177 Revision 1, Trustworthy Email (Draft) was released last month and offers up-to-date security guidance to include SPF, DKIM, DMARC, and email digital signatures and encryption (via S/MIME), among others.
NIST SP 800-177: New Email Security Guidelines To Combat Phishing Threats Read More »
The National Institute of Standards and Technology (NIST) has releases its Security Publication (SP) 800-177 Revision 1, that include security guidelines and recommendations for achieving “trustworthy email”.
NIST SP 800-177 Revision 1: “Trustworthy Email” Read More »
Google announced a major security enhancement to its public Domain Name Service (DNS), the most widely used public DNS recursive resolver service used on the internet.
Google public DNS service now supports DNS-over-TLS Read More »
Cisco’s Talos security group has discovered a new cyber campaign dubbed “DNSpionage” that targets organizations in the Middle East. The cyber attacks have impacted .gov domains in Lebanon and the United Arab Emirates (UAE), as well as a Lebanese airline company. “This particular campaign utilizes two fake, malicious websites containing job postings that are used to compromise targets via
DNSpionage campaign threat targets Middle East Read More »
There are multiple vulnerabilities in the implementations of self-encrypting Solid-state Drives (SSDs). Attackers can exploit vulnerabilities in ATA Security or TCG Opal Standards in Self-Encrypting Disks (SEDs) and decrypt contents of an encrypted drive.
Multiple vulnerabilities discovered in self-encrypting drives Read More »
Security researchers at F-Secure have uncovered a decade-old attack that exploits firmware weaknesses in laptops to expose encryption keys and sensitive data.
Cold boot attack can expose encryption keys, data on laptops Read More »
