Security News

FBI warns users to be wary of phishing sites abusing HTTPS
2019-06-12 10:55

Why you shouldn't trust a website simply because it's secured using HTTPS and backed by the green padlock symbol.

FBI Warns of HTTPS Abuse in Phishing Campaigns
2019-06-11 15:26

Malicious actors are abusing users’ trust in the HTTPS protocol to launch phishing campaigns, the Federal Bureau of Investigation (FBI) warns in a recent alert.  read more

DNS over HTTPS is coming whether ISPs and governments like it or not
2019-04-24 10:59

DNS over HTTPS (DoH), backed by Google, Mozilla and Cloudflare, is about to make web surveillance a lot more difficult.

A patchy Apache a-patchin: HTTP server gets fix for worrying root access hole
2019-04-03 19:52

Rogue 'worker' processes can sneak in with elevated privileges at startup Apache HTTP Server has been given a patch to address a potentially serious elevation of privilege vulnerability.…

Attackers Store Malware in Hidden Directories of Compromised HTTPS Sites
2019-04-01 16:42

Cybercriminals are utilizing hidden “well-known” directories of HTTPS sites to store and serve malicious payloads, Zscaler security researchers have discovered.  read more

Cloudflare Launches New HTTPS Interception Detection Tools
2019-03-19 18:21

Security services provider Cloudflare on Monday announced the release of two new tools related to HTTPS interception detection.  read more

Welcome to the sunlit uplands of HTTP/2, where a naughty request can send Microsoft's IIS into a spin
2019-02-21 11:59

It's patching time again for Windows Server 2016 and Windows 10 Oops! Microsoft has published an advisory on a bug in its Internet Information Services (IIS) product that allows a malicious HTTP/2...

VLC Responds to Criticism Over Lack of HTTPS for Updates
2019-01-21 19:11

The developers of the popular open source video player VLC, which recently surpassed 3 billion downloads, have responded to criticism over the use of HTTP for software updates. read more

Dozens of .gov HTTPS certs expire, websites offline, FBI on ice, IT security slows... Yup, it's day 20 of Trump's govt shutdown
2019-01-11 02:02

Hackers may be rubbing their hands with glee The IT impact of the ongoing partial US federal government shutdown has begun to show up in the form of degraded computer security. According to...

Great, you've moved your website or app to HTTPS. How do you test it? Here's a tool to make local TLS certs painless
2019-01-09 08:04

Breathe easier knowing you've tested your software properly A Google cyrptoboffin is close to releasing a tool that will hopefully make all of us more secure online.…