1981
New
The latest blog posts to take off on Hacker News. 4,441 posts.
1982
Highly Evasive Attacker Leverages SolarWinds Supply Chain
Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.
1983
SCOTUS rules you may sue government agents for damages when they violate rights
Arlington, Va.—In a unanimous opinion issued today by the U.S. Supreme Court, and authored by Associate Justice Clarence Thomas, the Court ruled in Tanzin v. […]
1984
1985
FireEye Shares Details of Recent Cyber Attack
Trellix XDR, get the latest cybersecurity trends, best practices, security vulnerabilities, and more from industry leaders.
1986
1987
Good-bye ESNI, hello ECH!
A deep dive into the Encrypted Client Hello, a standard that encrypts privacy-sensitive parameters sent by the client, as part of the TLS handshake.
1988
Improving DNS Privacy with Oblivious DoH
Oblivious DoH (ODoH) makes secure DNS over HTTPS (DoH) queries into private queries which prevent the leakage of client IP addresses to resolvers. The new proposed ODoH standard addresses this problem and today we are enabling users to use this protocol with 1.1.1.1
1989
Cyberespionage Using SS7 via Circles
Circles is a surveillance firm that reportedly exploits weaknesses in the global mobile phone system to snoop on calls, texts, and the location of phones around the globe, and is affiliated with NSO Group, which develops the oft-abused Pegasus spyware. Using Internet scanning, we found a unique signature associated…
1990
An iOS zero-click radio proximity exploit odyssey
Posted by Ian Beer, Project ZeroNOTE: This specific issue was fixed before the launch of Privacy-...
1991
1992
hCaptcha now runs on fifteen percent of the internet
Discover how hCaptcha has become the largest independent CAPTCHA service and now runs on 15% of the internet.
1993
Someone attacked our company
At the start of November, someone decided that they would try to attack and destroy our company. Here’s how we stopped them.
1994
Police in Mississippi to Pilot a Program to Live-Stream Amazon Ring Cameras
The police surveillance center in Jackson, Mississippi, will be conducting a 45-day pilot program to live stream the security cameras, including Amazon Ring cameras, of participating residents.
1995
Guidance to developers affected by effort to block less secure browsers, apps
We are always working to improve security protections of Google accounts. Our security systems automatically detect, alert and help protect our users against a range of security threats. One form of phishing, known as “ man-in-the-middle ”, is hard to detect when an embedded browser framework (e.g., Chromium Embedded…
1996
Cover Your Tracks
Today, we’re pleased to announce Cover Your Tracks, the newest edition and rebranding of our historic browser fingerprinting and tracker awareness tool Panopticlick. Cover Your Tracks picks up where Panopticlick left off. Panopticlick was about letting users know that browser fingerprinting was...
1997
Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) Comment Period
We're crowdsourcing ideas and recommendations to help us enhance the privacy and security benefits of DNS-over-HTTPS (DoH) for users around the world
1998
Firefox 83 introduces HTTPS-Only Mode
Security on the web matters. Whenever you connect to a web page and enter a password, a credit card number, or other sensitive information, you want to be sure ...
1999
Big no on Big Sur: Mullvad disallows Apple apps to bypass firewall
Despite Apple’s changes to macOS with the release of Big Sur, we can confirm that the Mullvad app still performs as intended by not allowing Apple’s own apps to bypass our VPN firewall.
2000
GNUnet 0.14.0
GNU's framework for secure p2p networking
2001
Campaign “Reclaim Your Face” Calls for a Ban on Biometric Mass Surveillance
Civil society across Europe launches the “Reclaim Your Face” campaign, demanding that local and national authorities listen to their communities about the serious risks of using facial recognition and other biometric technologies in public spaces. The newly formed coalition calls to ban biometric mass surveillance, in…
2002
Getting a biometric security key right
"Discover the upcoming YubiKey Bio with biometric capabilities. Enhance your security with our cutting-edge, FIDO-enabled device. Sign up for updates!
2003
2004
RansomEXX Trojan attacks Linux systems
We recently discovered a new file-encrypting Trojan built as an ELF executable and intended to encrypt data on machines controlled by Linux-based operating systems.
2005
US Government Continues Encryption War
Evergreen privacy guides, threat modeling, encryption, practical tutorials.
2006
Fast open-source intrusion detection
The system, developed by Carnegie Mellon University CyLab researchers, achieves speeds of 100 gigabits per second using a single server.
2007
Standing on our own two feet
Update, July 10, 2023 See our new blog post for details on the September 2024 expiration of the newer ISRG Root X1 cross-sign from IdenTrust. Update, December 21, 2020 Thanks to community feedback and our wonderful partners at IdenTrust, we will be able to continue to offer service without interruption to people using…
2008
2009
Introducing Semgrep and r2c
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
2010
Spanish police plans to extend use of its lie-detector while efficacy is unclear
Veripol is a software that assesses the veracity of complaints filed with the Spanish national police. It was introduced in 2018, but it's unclear if it works as intended.