YubiKey FIPS devices recalled after security issue found
Yubico has issued a recall of certain models of its YubiKey FIPS series devices after the company discovered security issues.
WordPress 5.2 “Jaco” comes with new security features
WordPress version 5.2 dubbed "Jaco" is available for download and includes a number of new security features and improvements, such as digitally-signed updates, Site Health Check, and PHP error protection.
Facebook says Millions of Instagram passwords stored in clear text
Facebook provided an update to a previously disclosed incident involving insecurely storing "tens of thousands" of Instagram users' passwords on internal servers in clear text. Facebook now says that "millions" of Instagram accounts are now impacted.
VPN applications exposed to critical vulnerability
Multiple VPN applications are vulnerable to not properly encrypting sensitive data and insecurely storing session cookies.
Firefox Send – a new free encrypted file transfer service
Mozilla just introduced Firefox Send, a free encrypted file transfer service that allow users to safely and simply share files via any browser.
NIST SP 800-177 Revision 1: “Trustworthy Email”
The National Institute of Standards and Technology (NIST) has releases its Security Publication (SP) 800-177 Revision 1, that include security guidelines and recommendations for achieving "trustworthy email".
Google public DNS service now supports DNS-over-TLS
Google announced a major security enhancement to its public Domain Name Service (DNS), the most widely used public DNS recursive resolver service used on the internet.
DNSpionage campaign threat
Cisco's Talos security group has discovered a new cyber campaign dubbed "DNSpionage" that targets organizations in the Middle East. The cyber attacks have impacted .gov domains in Lebanon and the United Arab Emirates (UAE),…
Multiple vulnerabilities discovered in self-encrypting drives
There are multiple vulnerabilities in the implementations of self-encrypting Solid-state Drives (SSDs). Attackers can exploit vulnerabilities in ATA Security or TCG Opal Standards in Self-Encrypting Disks (SEDs) and decrypt contents of an encrypted drive.
Cold boot attack can expose encryption keys, data on laptops
Security researchers at F-Secure have uncovered a decade-old attack that exploits firmware weaknesses in laptops to expose encryption keys and sensitive data.
- 1
- 2