Security News > 2020 > January

The latest version of the BitWarden Android client supports facial recognition. Find out how to enable it.

Is a Linux SSH GUI in your future? Jack Wallen believes once you try Snowflake, there's no going back. 90% of the time I'm using that tool from the Linux platform, where I open a terminal window and SSH into what seems like an endless array of remote servers.

Is a Linux SSH GUI in your future? Jack Wallen believes once you try Snowflake, there's no going back.

Google paid out $6.5 million in bug-bounty rewards in 2019, which doubles the internet behemoth's previous annual top total. Requested quarry includes apps that violate Google Play, Google API and Google Chrome Web Store Extension privacy policies.

Fresh on the heels of a disclosure that Microsoft Corp. leaked internal customer support data to the Internet, mobile provider Sprint has addressed a mix-up in which posts to a private customer support community were exposed to the Web. KrebsOnSecurity recently contacted Sprint to let the company know that an internal customer support forum called "Social Care" was being indexed by search engines, and that several months worth of postings about customer complaints and other issues were viewable without authentication to anyone with a Web browser.

SEE: Cheat sheet: Facebook Data Privacy Scandal Scott Matteson: How do policymakers and enterprises around the world view data privacy in 2020? What trends should we be looking out for? Rina Shainski: Our right to personal privacy, specifically our data privacy, has become an increasingly important issue, driven by the realization that the growing abundance of data doesn't "Shield" individuals anymore. Privacy enhancing technologies represent a new, emerging category of technologies, and are increasingly being used to protect data privacy while enabling data use.

Apple has just announced its latest round of security updates. There are plenty of critical holes patched in this raft of updates - so we strongly advise you to patch right away, before anyone figures out how to abuse these newly-documented holes for fun or profit.

LONDON - The European Union unveiled security guidelines for next generation high-speed wireless networks that stop short of calling for a ban on Huawei, in the latest setback for the U.S. campaign against the Chinese tech company. No companies were mentioned by name but the term "High risk" supplier was an obvious reference to Huawei , the world's top maker of telecom infrastructure equipment such as routers, switches and antennas - the hidden plumbing through which wireless companies' internet data traffic flows.


Researchers at cybersecurity firm Qualys have identified a potentially serious vulnerability in OpenSMTPD that can allow remote command execution with elevated privileges. OpenSMTPD is the OpenBSD Project's free and open source implementation of the Simple Mail Transfer Protocol.