Collaborate Disseminate
Cisco patched a critical remote authentication bypass vulnerability in its Prime Home remote management tool used by service providers. Continue reading Cisco Patches Authentication Bypass in Cisco Prime Home
Microsoft said a Windows SMB zero day, which has a public proof-of-concept exploit available, is low risk and won’t be patched until an upcoming Patch Tuesday. Continue reading Microsoft Waits for Patch Tuesday to Fix SMB Zero Day
Google pumped more life into the use of physical keys as a second form of authentication when it added Security Key enforcement support to G Suite. Continue reading Google Adds Security Key Enforcement to G Suite Apps, Hosted S/MIME to Gmail
Zimperium announced Tuesday its N-Days Exploit Acquisition Program that will reward researchers for Android and iOS exploits. Continue reading Zimperium Program Buys Exploits for Patched Mobile Vulnerabilities
Debian developers are recommending that the Cryptkeeper Linux encryption app be pulled from the distribution after a universal password was found. Continue reading Ugly Password Gaffe Plagues Cryptkeeper Encryption App
Facebook’s Delegated Recovery delegates account-recovery permissions to third-party accounts controlled by the user. GitHub is the program’s first partner. Continue reading Facebook Tackles Account Recovery with Delegated Recovery Protocol
Academics studying 283 Android VPN apps quantified a number of problems associated with native platform support for VPN clients through the BIND_VPN_SERVICE. Continue reading Many Android VPN Apps Breaking Privacy Promises
Google announced that it will operate its own root Certificate Authority, stood up by the acquisition of two root CAs from GlobalSign. Continue reading Google to Operate its Own Root CA
Google announced that it will operate its own root Certificate Authority, stood up by the acquisition of two root CAs from GlobalSign. Continue reading Google to Operate its Own Root CA
A bipartisan bill was introduced this week in the House calling for the NHTSA to conduct a study that would determine appropriate cybersecurity standards for motor vehicles. Continue reading Bill Calls for Study of Cybersecurity Standards for Cars