2551
800M Email Addresses Leaked Online by Email Verification Service
Our Biggest Data Breach Discovery of 2019 a massive 800 million emails leaked online. This data breach uncovered how an email verification service uses spam
New
The latest blog posts to take off on Hacker News. 4,441 posts.
2552
2553
Serious Chrome zero-day
The Sophos Blog
2554
2555
How to Spoof PDF Signatures
One year ago, we received a contract as a PDF file. It was digitally signed. We looked at the document - ignoring the "certificate is not tr...
2556
Facebook Doubles Down on Misusing Your Phone Number
When we publicly demanded that Facebook stop messing with users’ phone numbers last week, we weren’t expecting the social network to double down quite like this: By default, anyone can use the phone number that a user provides for two-factor authentication (2FA) to find that user’s profile. For...
2557
German Data Privacy Commissioner Says Article 13 Inevitably Leads to Filters
German Data Privacy Commissioner Ulrich Kelber is also a computer scientist, which makes him uniquely qualified to comment on the potential consequences of the proposed new EU Copyright Directive. The Directive will be voted on at the end of this month, and its Article 13 requires that online...
2558
The Supreme Backdoor Factory
Recently I was playing with VirusTotal Intelligence and while testing some dynamic behavior queries I stumbled upon this strange PE binary (MD5: …
2559
Millions of Binaries Later: A Look into Linux Hardening in the Wild
With Sophos Cloud Native Security, you can easily integrate protection across multiple environments while minimizing detection time and response.
2560
2561
The most popular docker images each contain at least 30 vulnerabilities
we found that 44% of docker image scans had known vulnerabilities, and for which there were newer and more secure base image available. Most vulnerabilities originate in the base image you selected. For that reason, remediation should focus on base image fixes.
2562
ETS Isn't TLS and You Shouldn't Use It
The good news: TLS 1.3 is available, and the protocol, which powers HTTPS and many other encrypted communications, is better and more secure than its predecessors (including SSL). The bad news: Thanks to a financial industry group called BITS, there’s a look-alike protocol brewing called ETS (or...
2563
PureBoot, the High Security Boot Process
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
2564
ICANN Calls for DNSSEC for All Domains Following Domain Hijacking Attempts
Announcement that the Internet Corporation for Assigned Names and Numbers (ICANN) believes there is an ongoing and significant risk to key parts of the Domain Name System (DNS) infrastructure and is calling for the full deployment of the Domain Name System Security Extensions (DNSSEC) across all unsecured domain names.
2565
Breaking Out of Docker via RunC
Unit 42 brings together world-renowned threat researchers, incident responders and security consultants to create an intelligence-driven, response-ready organization that's passionate about helping you proactively manage cyber risk.
2566
Intelligent Tracking Prevention 2.1
Note: Read about past updates to this technology in other blog posts about Intelligent Tracking Prevention, and the Storage Access API.
2567
Password Managers: Under the Hood of Secrets Management
February 19, 2019
2568
2569
Deciphering the Messages of Apple’s T2 Coprocessor
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
2570
Public hacker test on Swiss Post’s e-voting system
Die Post unterstützt mit ihren Dienstleistungen den Alltag der Menschen in der Schweiz, in der physischen und in der virtuellen Welt. Beim E-Voting digitalisiert sie, was sie bereits am besten kann: den sicheren Transport vertraulicher Informationen.
2571
Kenya Government mandates DNA-linked national ID, without data protection law
Last month, the Kenya Parliament passed a seriously concerning amendment to the country’s national ID law, making Kenya home to the most privacy-invasive national ID system in the world. The ...
2572
2573
2574
Auditing Rust Crypto: The First Hours
The Latest News from Research at Kudelski Security
2575
Open-Sourcing ClusterFuzz
The latest news from Google on open source releases, major projects, events, and outreach programs for early career developers.
2576
The Big DNS Privacy Debate at FOSDEM
This weekend at the excellent FOSDEM gathering there were no less than three presentations on DNS over HTTPs.
2577
2578
Microsoft Azure data deleted because of DNS outage
The Sophos Blog
2579
New study: Google manipulates users into constant tracking
Today, the Norwegian Consumer Council has filed a complaint against Google. Based on new research Google is accused of using deceptive design and misleading information, which results in users accepting to be constantly tracked
2580
CCPA Will Hit Dev Teams Harder Than GDPR
CCPA impacts dev teams more than GDPR. Learn who must comply, what data is covered, and how to protect test data safely.