SEARCH
All Articles
Firefox Now Blocks Social Media Trackers
In Firefox 70, Mozilla has added the ability to block trackers from Facebook, Twitter, and other social networks, as well as other new privacy enhancements.
FTC to Developers: Get Consent
The FTC action against a developer of "stalking" apps emphasized that installing an app that hid its presence on the device and didn't notify the user what it was doing was against the law.
Microsoft’s Secured-core PC Takes Aim at Firmware Attacks
Microsoft's Secured-core PC initiative is a partnership with OEM partners (including HP and Dell), silicon vendors (such as Intel, AMD, and Qualcomm) to provide deeply integrated hardware, firmware and software that can withstand firmware-based attacks.
Russian Attackers Used Iranian Infrastructure and Tools Against Multiple Targets
Investigations by the NSA and Uk's NCSC found that the Russian Turla attack group was using compromised C2 infrastructure and tools belonging to an Iranian APT group in several operations.
Decipher Podcast: James Plouffe
James Plouffe, a former technical adviser for Mr. Robot, joins Dennis Fisher to talk about the show's cultural legacy.
Prices for Attack Tools on Dark Web Forums Remain Stagnant
Flashpoint analysts look at Dark Web marketplaces and see that prices have not changed all that much in two years.
Wyden Introduces Tough New Privacy Bill
Sen. Ron Wyden has introduced a new privacy measure that would allow the FTC to assess huge fines for corporations that misuse consumer data--and mean jail time for executives who lie about their companies' policies.
Custom Instructions Comes to Arm, Secure Design Has to be On Board
Arm is bringing custom instructions to its Cortex-M processors. The overall security of these processors will depend on how these instructions are actually implemented.
HTTP Request Smuggling Bug in Go Affects Kubernetes
A flaw in the way Go handles some invalid HTTP headers could allow an attacker to authenticate as any user on a Kubernetes server in some instances.
Decipher Podcast: Kenn White
Kenneth White of MongoDB joins Dennis Fisher to discuss the challenges of encryption implementations in modern enterprise networks.
Industry Alliance to Make Security Products Work Together
Some of the biggest names in security have banded together for a new industry initiative to make it easier for different security technologies to work together.
Lazarus Group Deploying New macOS Backdoor
The Lazarus APT group has developed another macOS backdoor that has been delivered through a fake cryptocurrency trading app.
Imperva Breach Stemmed From Compromised Internal Compute Instance
A data breach disclosed in August by Imperva came from an AWS API key stolen from a compromised internal compute instance in 2017.
California Releases Draft Rules for CCPA
CCPA becomes law on Jan. 1. The California Department of Justice has released draft rules on how businesses should make sure they don't violate the new data privacy law.
FIN7 Attackers Roll Out New Tools
The FIN7 group has begun deploying new tools, including a module that specifically targets a remote administration tool for payment card systems.