241
Monzo: How our security team handle secrets
We recently designed a new system to manage secret information safely – from the keys that we use to sign your Mastercard transactions, to credentials for external services.
242
Get Ready for New SameSite=None; Secure Cookie Settings
UPDATE (10/28/2019): We've revised the 2nd and 3rd bullet points in the section "How to Prepare; Known Complexities" below. In May, Chrome ...
243
Dear Search Guard Users
We’ve filed a lawsuit against the makers of Search Guard. Here is what we know, the actions we’re taking, and potential impact to Search Guard users.
244
Security flaws caused by compiler optimizations
Learn how to optimize compilers for enterprise-wide automation, avoiding pitfalls with examples and solutions.
245
7M Adobe Creative Cloud Accounts Exposed to the Public
A data exposure of 7 million Adobe Creative Cloud account records could put users at risk of targeted phishing.
246
247
First modern coreboot server platform
With our expertise we create security solutions which are robust and easy to use, leveraging leading open source technology.
248
A proactive approach to more secure code
Microsoft Security Response Center Blog2019132 points28 commentscited by 17Security & Privacy details
What if we could eliminate an entire class of vulnerabilities before they ever happened?
249
Better password protections in Chrome
Posted by Patrick Nepper, Kiran C. Nair, Vasilii Sukhanov and Varun Khaneja, Chrome Team Today, we announced better password protection...
250
ProtonMail is dropping support for Internet Explorer 11
If you still use Internet Explorer, you will need to switch to a more secure, modern web browser to access Proton Mail.
251
Attunity Data Leak: Vendor for half the Fortune 100 exposed terabyte of backups
Backups ensure data continuity, but they're also a surface of risk. See how Fortune 100 vendor Attunity exposed nearly a terabyte of internal backups.
252
Deciphering the Messages of Apple’s T2 Coprocessor
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
253
Cisco devices must regenerate self-signed certificates before 2020
Self-signed X.509 PKI certificates (SSC) that were generated on devices that run affected Cisco IOS® or Cisco IOS XE software releases expire on 2020-01-01 00:00:00 UTC. New self-signed certificates cannot be created on affected devices after 2020-01-01 00:00:00 UTC. Any service that relies on these self-signed…
254
Virtually Unlimited Memory: Escaping the Chrome Sandbox
Posted by Mark Brand, Exploit Technique Archaeologist.IntroductionAfter discovering a collection ...
255
Large European routing leak sends traffic through China Telecom
Guest Post: A Swiss data centre leaked over 70,000 routes to China Telecom, some for over two hours.
256
Steganography Based Ad Payload That Drops Shlayer Trojan on Mac Users
Recent months have seen an uptick in reports of JavaScript malware that hides in image files.
257
258
Windows 0-day exploit used in Operation WizardOpium
During our investigation, we discovered that yet another 0-day exploit (CVE-2019-1458) was used in Operation WizardOpium attacks.
259
VPN services blocked in Sri Lanka as information controls tighten
Internet providers in Sri Lanka are in the vanguard of blocking access to digital security tools that allow users to work around censorship, according to new NetBlocks network measurement data. ...
260
261
Oklahoma Department of Securities Leaked Millions of Files
A storage server configured for public access exposed millions of files belonging to the Oklahoma Securities Commission.
262
2019 Guide to Cryptographic Key Sizes and Algorithm Recommendations
A simple, accessible recommendation for key sizes and recommended algorithms for various cryptographic algorithms.
263
An Intern's Experience with Rust
Over the course of my internship at the Microsoft Security Response Center (MSRC), I worked on the safe systems programming languages (SSPL) team to promote safer languages for systems programming where runtime overhead is important, as outlined in this blog . My job was to port a security critical network processing…
264
265
Segment Security Incident
Segment's Incident and Scheduled Maintenance History
266
Public hacker test on Swiss Post’s e-voting system
Die Post unterstützt mit ihren Dienstleistungen den Alltag der Menschen in der Schweiz, in der physischen und in der virtuellen Welt. Beim E-Voting digitalisiert sie, was sie bereits am besten kann: den sicheren Transport vertraulicher Informationen.
267
OS X/Linker: New Mac malware attempts zero-day Gatekeeper bypass
Last week, Intego researchers discovered new Mac malware, OSX/Linker, that attempts to leverage a recently disclosed zero-day flaw in macOS' Gatekeeper protection. Let's examine what we know about this latest Mac malware campaign. What is the back story? Before digging into the OSX/Linker malware, it would be helpful…
268
269
Improving privacy and security on the web
In 2008, we launched Chrome with the goal of building a speedy, simple, secure and stable web for everyone, everywhere. Ten years later, use...
270
We Can Choose an Internet Without Surveillance
The internet is not just a network of computers—it’s a network of people. We hold great power in deciding its future.