Security News

HTTP Bugs Open Websites to DoS Attacks
2019-08-15 19:20

Eight vulnerabilities in the HTTP/2 server implementations were found in vendors Amazon, Apple, Microsoft and Apache.

HTTP/2 Implementation Vulnerabilities Expose Servers to DoS Attacks
2019-08-14 11:48

Researchers at Netflix and Google have discovered a total of eight denial-of-service (DoS) vulnerabilities affecting various HTTP/2 implementations, including from major tech companies such as...

HTTP/2, Brute! Then fall, server. Admin! Ops! The server is dead
2019-08-14 09:02

Beware the denials of service: Netflix warns of eight networking bugs On Tuesday, Netflix, working in conjunction with Google and CERT/CC, published a security advisory covering a series of...

8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks
2019-08-14 08:33

Various implementations of HTTP/2, the latest version of the HTTP network protocol, have been found vulnerable to multiple security vulnerabilities affecting the most popular web server software,...

Header aches in Firefox, Tor, Brave and Chrome as HTTP opens new security holes
2019-08-13 10:11

Alternative Services spec bungled by browser makers The HTTP Alternative Services header can be abused to conduct network reconnaissance and attacks, to bypass malware protection services, and to...

Web body mulls halving HTTPS cert lifetimes. That screaming in the distance is HTTPS cert sellers fearing orgs will bail for Let's Encrypt
2019-08-13 01:43

Expensive renewals once a year... or free certificates any time? Tough choice CA/Browser Forum – an industry body of web browser makers, software developers, and security certificate issuers – is...

Kazakhstan Begins Intercepting HTTPS Internet Traffic Of All Citizens Forcefully
2019-07-19 09:34

If you are in Kazakhstan and unable to access the Internet service without installing a certificate, you're not alone. The Kazakhstan government has once again issued an advisory to all major...

Still not using HTTPS? Firefox is about to shame you
2019-07-18 11:32

Two years after promising to report all HTTP-based web pages as insecure, Mozilla is about to deliver.

Google Makes DNS Over HTTPS Generally Available
2019-06-27 14:12

Google this week announced the general availability of its standard DNS over HTTPS (DoH) service, which includes full RFC 8484 support. read more

Google Announces DNS over HTTPS ‘General Availability’
2019-06-26 22:33

Google finalizes its DNS-over-HTTPS service inching toward a world where DNS request are sent via HTTPS and not UDP or TCP.