Collaborate Disseminate
The official UK TV licensing website was allowing license purchasers to submit their personal identifiable information and bank details in unsafe, unencrypted plaintext.
Continue reading TV License website said it was secure. It wasn’t
The official UK TV licensing website was allowing license purchasers to submit their personal identifiable information and bank details in unsafe, unencrypted plaintext.
Continue reading TV License website said it was secure. It wasn’t
In the security news, Spanish driver tests positive for every drug test, vulnerabilities found in the remote management interface of Supermicro servers, Apache Struts 2 flaw in the wild, HTTPS crypto-shame, and how to manipulate Apple’s podcast c… Continue reading Supermicro, Apache Struts, & HTTPS – Paul’s Security Weekly #574
The official release of the version includes 40 fixes, seven of which are rated “High.” Continue reading Google Rolls Out 40 Fixes with Chrome 69
This post was authored by Jason Wood, founder of Paladin Security, a host on Security Weekly and commentator on Hack Naked News. This post is sponsored by DigiCert. Ah, the easy, old days when you could buy an SSL/TLS certificate that was valid for up … Continue reading Max Age For SSL/TLS Certificates Now Two Years
At Black Hat, Google’s Parisa Tabriz discussed how to navigate the complex security environment with long-term thinking and a policy of open collaboration. Continue reading Black Hat 2018: Google’s Tabriz Talks Complex Security Landscapes
Let’s Encrypt certificates can now stand on their own for almost all newer versions of operating systems, browsers and devices. Continue reading Microsoft Adds Direct Trust for Let’s Encrypt
This is the Shared Security Weekly Blaze for July 30th, 2018 sponsored by Security Perspectives – Your Source for Tailored Security Awareness Training and Assessment Solutions and Silent Pocket. This episode was hosted by Tom… Continue reading The Shared Security Weekly Blaze – Bluetooth Vulnerabilities, Malicious Apps Removed from Twitter, Gmail Confidential Mode
With non-HTTPS sites now getting actively outed as “insecure” by browsers… well, why should we care? We explain in plain English… Continue reading HTTP versus HTTPS – what’s all the fuss? [VIDEO]
Websites still using HTTP are marked as “not secure” by Chrome, 85,000 Google employees haven’t been phished for a year, and if you’re buying drugs via PayPal’s Venom app you should say goodbye to privacy.
All this and much much more is discussed in th… Continue reading Smashing Security #088: PayPal’s Venmo app even makes your drug purchases public