Security News

Week in review: Critical Chrome zero-day, TLS certs for sale on dark web, RSA Conference 2019
2019-03-10 19:30

Here’s an overview of some of last week’s most interesting news and articles: RSA Conference 2018 coverage Check out what you missed at the infosec event of the year. How malware traverses your...

CERT/CC Warns of Vulnerabilities in Marvell Avastar Wireless SoCs
2019-02-08 16:57

The CERT Coordination Center (CERT/CC) has issued a vulnerability note providing information on a series of security issues impacting Marvell Avastar wireless system on chip (SoC) models.

Week in review: FaceTime bug, Apple developer certs abused, new privacy attack against 5G
2019-02-03 19:30

Here’s an overview of some of last week’s most interesting news and articles: New Mac malware steals cookies, cryptocurrency and computing power A new piece of Mac malware is looking to steal both...

Apple yoinks enterprise certs from Facebook, Google, killing internal apps, to show its power
2019-02-01 01:56

You have been warned, says Cupertino: Tech giants abuse dev program, iPhone maker eventually undoes ban After briefly punishing Facebook and Google for violating the rules of its enterprise...

Furious Apple revokes Facebook's enty app cert after Zuck's crew abused it to slurp private data
2019-01-30 20:09

Internal FB apps in chaos, lawmaker on warpath Facebook has yet again vowed to "do better" after it was caught secretly bypassing Apple's privacy rules to pay adults and teenagers to install a...

Furious Apple revokes Facebook's enty app cert after Zuck's crew used it for privacy slurping
2019-01-30 20:09

Internal FB apps in chaos, lawmakers on warpath Facebook has yet again vowed to "do better" after it was caught secretly bypassing Apple's privacy rules to pay teenagers to install a data-slurping...

Dozens of .gov HTTPS certs expire, websites offline, FBI on ice, IT security slows... Yup, it's day 20 of Trump's govt shutdown
2019-01-11 02:02

Hackers may be rubbing their hands with glee The IT impact of the ongoing partial US federal government shutdown has begun to show up in the form of degraded computer security. According to...

Great, you've moved your website or app to HTTPS. How do you test it? Here's a tool to make local TLS certs painless
2019-01-09 08:04

Breathe easier knowing you've tested your software properly A Google cyrptoboffin is close to releasing a tool that will hopefully make all of us more secure online.…

Route security, Cisco cert expiration, ETSI and middleboxes
2018-11-09 15:20

Oh, and IETF standards got sloshed this week Cisco admins, you thought your week was over, right? Sorry: if you have kit that runs Adaptive Security Appliance software or the Firepower Extensible...

Mozilla grants distrusted Symantec certs a stay of execution, claims many sites yet to make switch
2018-10-11 11:34

Delay 'in the overall best interest' of Firefox users Mozilla has postponed its plans to distrust all legacy digital certificates from Symantec, spreading dismay in security circles.…