Security News

It's a cert: Hundreds of big sites still unprepared for starring role in that Chrome 70's show
2018-10-09 16:48

Bloody SSL...it's the final countdown Hundreds of high-profile websites are still unprepared for the total disavowal of legacy Symantec-issued digital certificates that will kick in with the...

How to nab a HTTPS cert for a stranger's website: Step one, shatter those DNS queries...
2018-09-06 10:01

Domain validation systems fooled by boffins Updated Researchers in Germany have discovered how to obtain HTTPS security certificates for web domains they don't own – even if the certs are...

’No questions asked’ Windows code cert slingers 'fuel trade' in digitally signed malware
2018-06-26 06:09

Oh it's for a calculator app? OK, wink wink, say no more Trusted code-signing certificates are being sold to miscreants by allegedly unscrupulous vendors, fueling a growth in digitally signed...

US-CERT warns of more North Korean malware
2018-06-18 03:02

'Typeframe' springs from the same den as 'Hidden Cobra' The United States Department of Homeland Security's Computer Emergency Response Team (US-CERT) has warned against another malware campaign...

New Features Added to CERT Tapioca Tool
2018-05-25 05:30

The CERT Coordination Center (CERT/CC) at Carnegie Mellon University this week announced the launch of a new version of the network traffic analysis tool CERT Tapioca. read more

US-CERT issues alert for Russian attacks targeting IoT devices
2018-04-19 10:25

Attorney and former CIA case officer Jack Rice explains how foreign actors could attack critical infrastructure, and how US intelligence agencies deploy a proportional response to cyber attacks.

Free Qualys services give orgs visibility of their digital certs and cloud assets
2018-04-16 19:20

Qualys announced two new free groundbreaking services: CertView and CloudView. Harnessing the power and scalability of the Qualys Cloud Platform, Qualys CertView and CloudView enable organizations...

Shared Accounts Increasingly Problematic for Critical Infrastructure: ICS-CERT
2018-01-16 09:34

Assessments conducted last year by the U.S. Department of Homeland Security’s Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) showed that boundary protection remains the...

Windows 10 Security Feature Broken, CERT/CC Warns
2017-11-21 13:33

Entropy Alert: Non-Random ASLR Leaves Systems Open To Buffer Overflow AttacksRecent versions of Windows have a security problem: They're not random enough, CERT/CC warns. The problem centers on...