VeraCrypt Patches Critical Vulnerabilities Uncovered in Audit

An audit of open source file and disk encryption software VeraCrypt wrapped up and a number of critical vulnerabilities uncovered in the assessment were patched. Continue reading VeraCrypt Patches Critical Vulnerabilities Uncovered in Audit

Free SSL Providers Spark Unprecedented Growth in Encrypted Traffic

For the first time, more than half of traffic on the Internet is encrypted, and experts say free SSL certificate providers are playing a big role. Continue reading Free SSL Providers Spark Unprecedented Growth in Encrypted Traffic

Leftover Factory Debugger Doubles as Android Backdoor

A researcher has found a backdoor, which he calls Pork Explosion, in an Android bootloader built by Foxconn. Continue reading Leftover Factory Debugger Doubles as Android Backdoor

Google Handles Record Number of Government Requests for Data

Google updated its Transparency Report, reporting a record number of government requests for data, and that it received at least one National Security Letter during the second half of 2015. Continue reading Google Handles Record Number of Government Requests for Data

Old SSH Vulnerability at Center of Credential-Stuffing Attacks

Akamai warns that attackers are compromising IOT devices and using them as proxies to test stolen credentials against web-based applications. Continue reading Old SSH Vulnerability at Center of Credential-Stuffing Attacks

Microsoft Patches Five Zero Days Under Attack

Microsoft released 10 security bulletins on Patch Tuesday that included patches for five zero day vulnerabilities under attack that had not been publicly disclosed until today. Continue reading Microsoft Patches Five Zero Days Under Attack