Collaborate Disseminate
To encourage website owners and service providers to move to HTTPS, Google began sending out emails to remind them that their sites will be marked as insecure if they don’t comply. This is the latest step in the search giant’s long-term effort of crea… Continue reading Google reminds website owners to move to HTTPS before October deadline
The Onliner spambot, Google’s forthcoming Not Secure warnings for Chrome, the WireX botnet, Sarahah privacy and more are discussed. Continue reading Threatpost News Wrap, September 1, 2017
Google began sending out notices to site owners this month who haven’t yet migrated from HTTP to HTTPS warning them that in October their sites will be marked “NOT SECURE.” Continue reading Google Reminding Admins HTTP Pages Will Be Marked ‘Not Secure’ in October
Akeo Consulting Rufus fails to securely check for and retrieve updates,which an allow an authenticated attacker to execute arbitrary code on a vulnerable system. Continue reading VU#403768: Akeo Consulting Rufus fails to update itself securely
TLS 1.20 fixes a vulnerability so now’s the time to check that the software you use and the software you manage supports it Continue reading Debian move marks beginning of the end for TLS 1.0 and 1.1
Tor cofounder Roger Dingledine sets the record straight at DEF CON on popular myths, and at the same time teases upcoming features. Continue reading Tor Developer Busts Myths, Announces New Features
Two IP cameras sold by Loftek and VStartcam are leaving over 1.3 million users open to 21 vulnerabilities that range from a lack of HTTPS encryption to bugs that open users up to cross-site request forgery attacks. Continue reading Two Popular IP Cameras Riddled With Vulnerabilities
Two IP cameras sold by Loftek and VStartcam are leaving over 1.3 million users open to 21 vulnerabilities that range from a lack of HTTPS encryption to bugs that open users up to cross-site request forgery attacks. Continue reading Two Popular IP Cameras Riddled With Vulnerabilities
Leading certificate authority Let’s Encrypt is facing criticism that its rapid growth and eagerness to encrypt internet communications is happening at a cost. Continue reading Free Certs Come With a Cost
Certificate Transparency and OCSP Must-Staple can’t get here fast enough. Continue reading HTTPS Certificate Revocation is broken, and it’s time for some new tools