Collaborate Disseminate
Researchers think they’ve spotted a tracking technique that nobody has been paying attention to – TLS session resumption. Continue reading Could TLS session resumption be another ‘super cookie’?
SophosLabs has detected a new DDoS botnet targeting poorly secured SSH servers – called Chalubo, it is named in honour of its use of the ChaCha stream cipher. Continue reading Poorly secured SSH servers targeted by Chalubo botnet
Drupal website owners have some important patching homework to do. Continue reading Patch now! Multiple serious flaws found in Drupal
The flaw in the popular file uploader allows an attacker to upload files and run their own command line shell on any affected server. Continue reading Popular website plugin harboured a serious 0-day for years
Six routers with serious security flaws are considered end of life (EOL) and may never be updated. Continue reading Serious D-Link router security flaws may never be patched
If you live in the EU, turning on a new Android device after 29 October 2018 could look quite different… Continue reading Is Google’s Android app unbundling good for security?
José Rodríguez has demonstrated how an attacker with physical access to a device running iOS 12.0.1 can gain access to photos stored on it. Continue reading New iPhone lock screen bypass exposes your photos
José Rodríguez has demonstrated how an attacker with physical access to a device running iOS 12.0.1 can gain access to photos stored on it. Continue reading New iPhone lock screen bypass exposes your photos
Researchers concluded that passphrase requirements such as a 15-character minimum length deter the majority users from reusing them on other sites. Continue reading Is this the simple solution to password re-use?
Pulling out an iPhone XS to show the assembled throng a picture of the hydrogen-powered aircraft that “our president should be flying in,” West casually unlocked it using the passcode ‘000000’. Continue reading What Kanye West can teach us about passcodes