Collaborate Disseminate
Web security uses cryptographic keypairs called public and private keys. See if you can guess which one is supposed to be kept private… Continue reading 4.5 million web servers have private keys that are publicly known!
Here’s something that’s supposed to happen, and it’s jolly convenient, too. If you plug a USB ethernet dongle into a Windows or OS X computer and the system supports it, then the operating system will activate the needed drivers, fire up the device, configure the network interface and get you online. Indeed, to anyone who […]
Continue reading Sidestepping your lockscreen with an innocent-looking USB stick
Rambler is the latest company whose records were hacked and now leaked, including plaintext passwords for each account. Continue reading More plaintext passwords leaked, nearly 100 MILLION of them!
Calling all IoT programmers! There’s not much point in having an encrypted connection if you’re talking to a crook at the other end… Continue reading More IoT insecurity: the routers that take instructions from anyone
Enjoy the latest episode of our regular security podcast. Continue reading What does “abundance of caution” mean, then? [Chet Chat Podcast 251]
The good news is that this ransomware is a badly-done job based on publicly available sources; the bad news is… exactly the same. Continue reading Fantom ransomware pretends to be a Windows critical update
Exploits against iOS don’t always translate into exploits against OS X, but in this case it seems they do. Continue reading Patch now! Recent iOS vulnerability affects Macs too
The official download of the Transmission app was hacked again: last time it was ransomware, this time a password stealer. Continue reading Mac password-stealing malware haunts Transmission app… again
A blundering Certificate Authority called “WoSign” is causing consternation amongst Mozilla’s security policy team. Continue reading How one man could have owned GitHub, and what happened next…
1.7 users of “Opera sync” were hit when crooks made off with encrypted passwords stored on the Sync servers. Continue reading Opera announces data breach: stored passwords stolen for 1.7M users