Category Archives: https

[SANS ISC] HTTPS Support for All Internal Services

Posted on by

I published the following diary on isc.sans.edu: “HTTPS Support for All Internal Services“: SSL/TLS has been on stage for a while with deprecated protocols, free certificates for everybody. The landscape is changing to force more and more people to switch to encrypted communications and this is good! Like Johannes explained yesterday, Chrome

The post [SANS ISC] HTTPS Support for All Internal Services appeared first on /dev/random.

Continue reading [SANS ISC] HTTPS Support for All Internal Services→

Fileless Malware, Endpoint Attacks on the Rise

Posted on by

Cybercriminals are increasingly leveraging fileless malware, cryptominers and encrypted attacks, targeting users both at remote locations as well as corporate assets behind the traditional network perimeter. These were among the findings of WatchGuard… Continue reading Fileless Malware, Endpoint Attacks on the Rise→

Chrome to Enforce HTTPS Web Protocol (Like It or Not)

Posted on by

What a difference an ‘s’ makes. This seemingly unimportant change could have a big—if unseen—impact.
The post Chrome to Enforce HTTPS Web Protocol (Like It or Not) appeared first on Security Boulevard.
Continue reading Chrome to Enforce HTTPS Web Protocol (Like It or Not)→

It’s Always DNS – But Not in the Way You May Think

Posted on by

A popular joke among technologists says that it’s always DNS, even when it initially didn’t seem that way. DNS issues come in many shapes and forms, including some often-overlooked security issues. DNS (short for the Domain Name System) continues to be… Continue reading It’s Always DNS – But Not in the Way You May Think→

Kazakhstan Spies on its People via Man-in-the-Middle Attack, Again

Posted on by

The Kazakh government is forcing its citizens to install a spyware root certificate, allowing authorities to crack open TLS traffic, such as HTTPS.
The post Kazakhstan Spies on its People via Man-in-the-Middle Attack, Again appeared first on Security … Continue reading Kazakhstan Spies on its People via Man-in-the-Middle Attack, Again→

APWG Q3 Report: Four Out of Five Criminals Prefer HTTPS

Posted on by

The Anti-Phishing Working Group (APWG), known for its collaborative analysis of phishing attacks and identify theft techniques, has released its Phishing Activity Trends Report for Q3 of 2020. Highlights from the report include more than two h… Continue reading APWG Q3 Report: Four Out of Five Criminals Prefer HTTPS→