Weekly Update 455

Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing

The bot-fighting is a non-stop battle. In this week’s video, I discuss how we’re tweaking Cloudflare Turnstile and combining more attributes around how bot-like requests are, and… it almost worked. Just as I was preparing to write this intro, I found a small spike of anomalous

Continue reading Weekly Update 455→

Weekly Update 454

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

We’re two weeks in from the launch of the new HIBP, and I’m still recovering. Like literally still recovering from the cold I had last week and the consequent backlog. A major launch like this isn’t just something you fire and forget; instead, it

Continue reading Weekly Update 454→

Have I Been Pwned 2.0 is Now Live!

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

This has been a very long time coming, but finally, after a marathon effort, the brand new Have I Been Pwned website is now live!

Feb last year is when I made the first commit to the public repo for the rebranded service, and we soft-launched the new brand in

Continue reading Have I Been Pwned 2.0 is Now Live!→

Welcoming the Malaysian Government to Have I Been Pwned

Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.

Today, we welcome the 40th government onboarded to Have I Been Pwned’s free gov service, Malaysia. The NC4 NACSA (National Cyber Coordination and Command Centre of the National Cyber Security Agency) in Malaysia now has full access to query all their government domains via API, and monitor them

Continue reading Welcoming the Malaysian Government to Have I Been Pwned→

After the Breach: Finding new Partners with Solutions for Have I Been Pwned Users

Presently sponsored by: Join Snyk’s May 15th event to discover how to establish a Security Champions program, bridging security and development

For many years, people would come to Have I Been Pwned (HIBP), run a search on their email address, get the big red “Oh no – pwned!” response and then… I’m not sure. We really didn’t have much guidance until we partnered with 1Password

Continue reading After the Breach: Finding new Partners with Solutions for Have I Been Pwned Users→