SSL certificate safety bolstered by standards that lessen dependence on CAs
Two new proposals have been submitted to the IETF attempting to fix some of the trust problems inherent in the current SSL certificate system used to secure our online communications.
View ArticleBrowser wars - Microsoft says IE10 will support Do Not Track by default
Browser vendors don't really compete on features any more, they compete on performance and trust; the best browser is the fastest, most secure and most private. The question is - how quickly will...
View ArticleGoogle wins, Oracle loses: Java API case closed - for now
Oracle sued Google, accusing the search giant's Android platform of infringing the Java-related copyrights and patents that Oracle acquired when it bought Sun in late 2010. The judgment is out.
View ArticleFlame malware used man-in-the-middle attack against Windows Update
Microsoft has released an emergency update for Windows, revoking digital certificates that could be used to impersonate the Windows Update security service. The Flame malware exploited flaws related to...
View ArticleFacebook privacy notice chain letter is a hoax
Facebook users have been spreading a chain letter recommending that their friends post a notice to their walls prohibiting Facebook and the US government from using their content. It is a chain...
View ArticleOnline romantics targeted by dating site phishing attack
More and more people are looking for love online. Be careful not to find yourself reeled in by a phisher.
View ArticleBurglars notify Brooklyn police of crimes via Facebook status updates
Some people still haven't learnt that you should be careful of who you friend on Facebook, and what you post online. Which, in some cases, is good news for the police.
View ArticleMajor shift in strategy for ZeroAccess rootkit malware, as it shifts to...
The ZeroAccess rootkit, which hijacks PCs and recruits them into a botnet, has undergone a significant revision - SophosLabs researcher James Wyke reveals.
View ArticleGoogle: "State-sponsored attackers may be attempting to compromise your account"
Google has said that it will start to proactively warn internet users when it suspects that "state-sponsored attackers" have attempted to break into accounts.
View ArticleMillions of LinkedIn passwords reportedly leaked - take action NOW
Although not yet confirmed by the business-networking website, it is being widely speculated that over six million passwords belonging to LinkedIn users have been compromised.
View ArticleLinkedIn confirms hack, over 60% of stolen passwords already cracked
LinkedIn has acknowledged the password database posted online appears to be from their network. 60% of the passwords have already been discovered and we are still seeing very poor password choices...
View ArticleMicrosoft speaks out on Flame malware certificate forgery
Microsoft has now gone public with additional information about the certificate forgery in the Flame malware. The attackers used an MD5 collision. Learn more about hash collisions, and how to avoid...
View ArticleUsers of dating website eHarmony told their passwords have been stolen
Over a million users of an online dating website are told that their password has been compromised by hackers.
View ArticleFacebook hacking and godawful gold lamé sneakers
How "devious cyberjerks" locked one user out, hijacked her account, spammed her friends, stole her mail, compromised her bank account, cashed credit card-linked checks, and tried to pawn off some (to...
View ArticleChange your Last.fm password NOW
Music-streaming website Last.fm has warned its millions of users to change their passwords immediately.
View ArticleInterest in Cryptocat spikes following developer's interrogation at US border
Interest in a free, encrypted web chat service called Cryptocat has spiked following the detainment and interrogation of its developer at the US border.
View ArticleRevealed: How Lady Gaga helped Google keep malware off Androids
Security researchers say that they have found multiple ways to bypass Bouncer, Google's automated system for detecting malicious Android apps before they are made available in the Google Play store.
View Article"Can you hack my Twitter? Pleaseee!"
If you get locked out of your Twitter account, would you ask someone to hack it for you?
View ArticleLeague of Legends online game joins the League of the Hacked
Online real-time strategy game League of Legends, from Riot Games, is the latest large web property to own up to a data breach. There's a silver lining, namely that the company's notification is frank...
View ArticleSSCC 92 - Flame, Do Not Track, TACK, Conficker and Android security
Michael Argast from Telus joined Chet once again to discuss the week's news. Topics covered include Flame malware, Do Not Track, TACK, Conficker and Sophos Mobile Security for Android.
View Article