Security News

Internet of crap (encryption): IoT gear is generating easy-to-crack keys
2019-12-16 14:00

Poor entropy in embedded devices leading to weaker certificates: study A preponderance of weak keys is leaving IoT devices at risk of being hacked, and the problem won't be an easy one to solve.…

PCI Point-to-Point Encryption Standard 3.0 released
2019-12-16 11:25

The PCI Security Standards Council (PCI SSC) has updated the PCI Point-to-Point Encryption Standard (P2PE) and supporting program. PCI P2PE Version 3.0 simplifies the process for component and...

Facebook refuses to break end-to-end encryption
2019-12-12 17:26

Congress on Tuesday told Facebook it must put backdoors into its end-to-end encryption, or it'll be forced to.

Americans should have strong privacy-protecting encryption ...that the Feds and cops can break, say senators
2019-12-10 21:12

I don't care if it's mathematically impossible, make it happen nerds! In its latest attempt to come up with a digital encryption scheme that's both secure and not, the US Senate Judiciary...

Facebook Firm on Message Encryption Despite Pressure
2019-12-10 20:56

Facebook said Tuesday it plans to move ahead with strong encryption for all its messaging applications, claiming that allowing law enforcement special access would end up being "a gift to...

Android Ups the Mobile Security Ante with Default TLS Encryption
2019-12-03 18:00

More than 90 percent of Android apps running on the latest OS encrypt their traffic by default.

Dexphot Malware Uses Randomization, Encryption, and Polymorphism to Evade Detection
2019-11-27 17:53

Malware that Microsoft has been tracking for over a year has been leveraging numerous techniques for evasion, including random file names, fileless installation, and polymorphism.  read more

EU raises eyebrows at possible US encryption ban
2019-11-27 12:26

EU officials have warned that they may not take kindly to a US encryption ban or insertion of crypto backdoor technology.

Fortanix and Google Cloud Platform deliver external encryption key management service for public cloud
2019-11-22 00:00

Fortanix, the Runtime Encryption company, announced that it has collaborated with Google Cloud Platform (GCP) to integrate its newly announced External Key Manager service with the Fortanix...

Macy's holiday breach highlights retailer need for encryption and scrutiny of third party systems
2019-11-20 14:44

Attackers were collecting user credit card information for an entire week from the Macy's website before they were alerted. Here's how retailers can protect themselves.