Collaborate Disseminate
Web Check offers thorough open-source intelligence and enables users to understand a website’s infrastructure and security posture, equipping them with the knowledge to understand, optimize, and secure their online presence. Unlike similar servic… Continue reading Web Check: Open-source intelligence for any website
How widespread is the use of hidden root CAs and certificates signed by them? To answer that and other questions, a group of researchers from several Chinese and U.S. universities and Qihoo 360, the company developing the 360 Secure Browser, have colle… Continue reading Researchers shed light on hidden root CAs
Cybercriminals were able to register malicious generic top-level domains (gTLDs) and subdomains imitating legitimate, prominent sites due to Verisign and several IaaS services allowing the use of specific characters that look very much like Latin lette… Continue reading Vulnerability allows attackers to register malicious lookalikes of legitimate web domains
One of the Magecart cybercriminal groups is testing a new method for grabbing users’ credit card info: malicious skimming code that can be loaded into files used by L7 routers. What is Magecart? Magecart is an umbrella label for a growing number … Continue reading Cybercriminals plan to make L7 routers serve card stealing code
Ad networks’ increasingly successful efforts to detect bot-based ad click fraud has forced attackers to focus more on intercepting and redirecting legitimate users’ clicks. How widespread is the practice? A group of researchers from Microsoft Res… Continue reading What can be done about the rising click interception threat?
In light of the recent DNS hijacking attacks, the Internet Corporation for Assigned Names and Numbers (ICANN) is urging domain owners and DNS services to implement DNSSEC post-haste. “Although DNSSEC cannot solve all forms of attack against the D… Continue reading ICANN calls for wholesale DNSSEC deployment
Tim Berners-Lee, the inventor of the World Wide Web, has not been hiding his disappointment with the direction in which his invention was taken. “The web has evolved into an engine of inequity and division; swayed by powerful forces who use it fo… Continue reading WWW inventor announces Solid, a push to create a decentralized web users can trust
1 out of 500 of the one million most visited websites according to Alexa contains a web-based cryptominer that starts mining as soon as the website has been opened in the browser, researchers from the Braunschweig University of Technology have found. S… Continue reading How lucrative is web-based cryptojacking?
While most tech companies that offer free email services are moving away from email scanning as a source of information for advertisers to target users more efficiently, Oath – the Verizon subsidiary that manages AOL and Yahoo and its webmail off… Continue reading Yahoo woos advertisers with email scanning for targeted ad delivery
Slowly but surely, the Internet is on its way to being 100% encrypted. According Scott Helme’s latest analysis of the one million most visited websites according to Alexa, 51.8% are actively redirecting to HTTPS. To compare: that percentage was a… Continue reading Half of Alexa Top 1 Million sites now use HTTPS