Privacy Clouds Form Over Mantistek Gaming Keyboard
Questions brew over whether Mantistek GK2 Mechanical Gaming Keyboard is snooping on users as they type. Continue reading Privacy Clouds Form Over Mantistek Gaming Keyboard
Author Archives: Tom Spring
Assessing Weaknesses in Public Key Infrastructure
Academic researchers size up weaknesses in the the code-signing Public Key Infrastructure and highlight three types of flaws. Continue reading Assessing Weaknesses in Public Key Infrastructure
US-CERT Warns of Crypto Bugs in IEEE Standard
Weak cryptography in the IEEE P1735 electronics standard allow attackers to recover valuable intellectual property in plaintext from SoCs and integrated circuits. Continue reading US-CERT Warns of Crypto Bugs in IEEE Standard
Data Pours from Cloud—And ‘The Enemy is Us’
Enterprises are grappling with widespread incidents of misconfigured servers leaking sensitive data to the public internet. Continue reading Data Pours from Cloud—And ‘The Enemy is Us’
Tor Browser Users Urged to Patch Critical ‘TorMoil’ Vulnerability
The Tor Project released a patch for a vulnerability that leaks the real IP addresses of macOS and Linux users of its Tor Browser. Continue reading Tor Browser Users Urged to Patch Critical ‘TorMoil’ Vulnerability
Poisoned Search Results Deliver Banking Malware
Zeus Panda, a banking Trojan designed to steal credentials, is being distributed via poisoned Google search results. Continue reading Poisoned Search Results Deliver Banking Malware
Taking HTTPS Denial to an Absurd Level
Researcher Troy Hunt discovers as far as the internet has come in adopting HTTPS, it still has a ways to go. Continue reading Taking HTTPS Denial to an Absurd Level
WordPress Delivers Second Patch For SQL Injection Bug
A bug exploitable in WordPress 4.8.2 and earlier creates unexpected and unsafe conditions ripe for a SQL-injection attack. Continue reading WordPress Delivers Second Patch For SQL Injection Bug
Popular ‘Circle with Disney’ Parental Control System Riddled With 23 Vulnerabilities
A popular parental monitoring system, called Circle with Disney, receives 23 patches for a wide range of serious vulnerabilities. Continue reading Popular ‘Circle with Disney’ Parental Control System Riddled With 23 Vulnerabilities
Firefox Bolsters Privacy, Pulls Plug on Browser Canvas Fingerprinting
Firefox is to stop using the privacy-busting canvas-based browser fingerprinting that allows websites to track users’ online activities. Continue reading Firefox Bolsters Privacy, Pulls Plug on Browser Canvas Fingerprinting