The latest blog posts to take off on Hacker News. 319 posts.
Microsoft Security Response Center Blog2020676 points384 commentscited by 3Security & Privacy details
As we said in our recent blog , we believe the Solorigate incident is an opportunity to work together in important ways, to share information, strengthen defenses and respond to attacks. Like other SolarWinds customers, we have been actively looking for indicators of the Solorigate actor and want to share an update…
The BAIR Blog
This article looks at the most commonly used web authentication methods.
Yesterday, the BBC ran a story with the factually untrue headline, “Cellebrite claimed to have cracked chat app’s encryption.” This is false. Not only can Cellebrite not break Signal encryption, but Cellebrite never even claimed to be able to. Since we weren’t actually given the opportunity to co...
We can't let the FBI keep the public in the dark about its ability to gain access to information stored on our personal mobile devices.
A community and blog for embedded software makers
Tor Browser 10.0.7 is now available from the Tor Browser download page and also from our distribution directory.
In Celebration of Becoming Open Source, Threema is 50% Off
Government operatives used NSO Group’s Pegasus spyware to hack 36 personal phones belonging to journalists, producers, anchors, and executives at Al Jazeera. The journalists were hacked by four Pegasus operators, including one operator MONARCHY that we attribute to Saudi Arabia, and one operator SNEAKY KESTREL that we…
We, along with the security industry and our partners, continue to investigate the extent of the Solorigate attack. While investigations are underway, we want to provide the defender community with intel to understand the scope and impact, remediation guidance, and detections and protections we have built as a result.
The developer community remains the heart of GitHub, and we’re committed to respecting the privacy of developers using our product.
Sequoia is a modular OpenPGP implementation in Rust.
Beginning August 13th, 2021, we will no longer accept account passwords when authenticating Git operations on GitHub.com.
2020 has seen its fair number of challenges and changes. We’ve all adapted to new ways of staying in touch, getting work done, celebrating birthdays and weddings, and even exercising. As more and more of our critical and personal moments move online, we want to continue to provide you with new wa...
We have identified three independently exploitable vulnerabilities in Go's encoding/xml. Read more about their impact to Mattermost users.
Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.
Arlington, Va.—In a unanimous opinion issued today by the U.S. Supreme Court, and authored by Associate Justice Clarence Thomas, the Court ruled in Tanzin v. […]
Trellix XDR, get the latest cybersecurity trends, best practices, security vulnerabilities, and more from industry leaders.
A deep dive into the Encrypted Client Hello, a standard that encrypts privacy-sensitive parameters sent by the client, as part of the TLS handshake.
Oblivious DoH (ODoH) makes secure DNS over HTTPS (DoH) queries into private queries which prevent the leakage of client IP addresses to resolvers. The new proposed ODoH standard addresses this problem and today we are enabling users to use this protocol with 1.1.1.1
Circles is a surveillance firm that reportedly exploits weaknesses in the global mobile phone system to snoop on calls, texts, and the location of phones around the globe, and is affiliated with NSO Group, which develops the oft-abused Pegasus spyware. Using Internet scanning, we found a unique signature associated…
Posted by Ian Beer, Project ZeroNOTE: This specific issue was fixed before the launch of Privacy-...
Discover how hCaptcha has become the largest independent CAPTCHA service and now runs on 15% of the internet.
