Security News > 2019 > May

Companies are still failing to effectively manage passwords
2019-05-02 12:39

Though most businesses have complex password requirements in place, many are falling into other traps of poor password management, according to a survey from OneLogin.

US Calls for Cautious EU Policy on 5G Networks
2019-05-02 12:31

The United States on Thursday urged "like-minded governments" from the European Union to be cautious and coordinate their policies on 5G network security in light of suspicions over the system...

DHS policies allow unlimited, warrantless device search
2019-05-02 12:29

Newly revealed policies show border agents can search devices for pretty much any reason, including if some other agency asked them to.

Xinjiang Surveillance App Targets Legal, Everyday Behaviour: Rights Group
2019-05-02 12:24

Chinese authorities are using a mobile app designed for mass surveillance to profile, investigate and detain Muslims in Xinjiang by labelling "completely lawful" behaviour as suspicious, a Human...

Is a sticky label the answer to the IoT’s security problems?
2019-05-02 12:22

How can IoT security be improved? The UK Government just published new details of its surprising and unfashionable answer.

Extortionists leak data of huge firms after IT provider refuses to pay
2019-05-02 12:08

The data was published after "Boris Bullet-Dodger" failed to get Citycomp to cough up.

US Government halves deadline for applying critical patches to 15 days
2019-05-02 11:39

US federal agencies must fix their security bugs twice as quickly under new rules issued by the Department of Homeland Security (DHS).

'I do not wish to surrender' Julian Assange tells court over US extradition bid
2019-05-02 11:29

Case will be heard over May and June Julian Asssange unsurprisingly told a judge today that he did not “wish to surrender myself” to a US extradition request.…

Evidence of backdoors in Huawei equipment collapse under light scrutiny
2019-05-02 10:59

A cursory search finds identical "backdoors" in D-Link, Cisco, and Sony devices, among others, as poor security practices do not equate to malicious intent.

Attackers actively exploiting Atlassian Confluence and Oracle WebLogic flaws
2019-05-02 10:45

Attackers are actively exploiting recently fixed vulnerabilities in Oracle WebLogic and the Widget Connector macro in Atlassian Confluence to deliver ransomware, mine cryptocurrency and make the...