Security news that informs and inspires

All Articles

2376 articles:

Deciphering Ferris Bueller’s Day Off

Life moves pretty fast. If you don't stop and look around once in a while, you could miss it. Ferris Bueller is a master of social engineering and possibly the witness protection identity of David Lightman from WarGames.

Podcast, Hacker Movies

Tracking By Any Name Is Still A Privacy Concern

Google and Apple are teaming up on a contact-tracing framework, but even with the privacy safeguards they have promised, there are still concerns over how this kind of data collection impacts user privacy.

Privacy, Surveillance

Keeping Up With Chrome, Firefox Browser Updates

Google and Mozilla have released multiple versions of their web browsers over the past few days to roll back certain features and to fix high-severity vulnerabilities.

Browser Security, Patching, Firefox, Google Chrome

RDP Drawing Unwanted Attention

The shift to remote work has caused a spike in the number of RDP servers exposed to the Internet, along with an increase in the number of scans for those servers.

RDP, Microsoft

Steal This Fingerprint

Research shows that attackers can bypass fingerprint sensors on some devices with as high as an 80 percent success rate.

Biometrics, 2fa

Kinsing Malware Targets Docker

An attacker is exploiting open Docker API ports to gain a foothold and install a piece of malware called Kinsing that tries to mine Bitcoin.

Malware

Mozilla Fixes Two Firefox Flaws Under Active Attack

Attackers are exploiting two use-after-free bugs in Firefox and Mozilla has released emergency patches for the vulnerabilities.

Mozilla

Too Many Exchange Servers Remain Unpatched

A security vulnerability in Microsoft Exchange that was fixed in February is still unpatched on hundreds of thousands of Exchange servers.

Microsoft, Exchange, Patching

Decipher Library: First Edition

We've put together a list of security and privacy related book recommendations from people across the industry, from technical manuals to histories to cyberpunk fiction.

Books, CISO, Privacy

Long Campaign Compromises MS-SQL Servers by the Thousands

An attacker based in China has been compromising thousands of MS-SQL servers for nearly two years.

Microsoft

Magecart Sets Sights on the SMB

The prolific Magecart group continues to evolve its attack techniques as it uses new skimmer code to steal payment card numbers from the websites of small- and medium-sized businesses, RiskIQ researchers found.

Magecart, Cybercrime, Ecommerce Security

Cloudflare Releases Warp Beta for Windows and macOS

The Cloudflare Warp security service is now available in beta for Windows and macOS, a year after the app became available for iOS and Android.

Vpn

Washington Is First State to Regulate Facial Recognition

As the first state with with a law regulating how government agencies can use facial recognition software, Washington provides other states with a blueprint on how—and how not to—tackle the security and privacy questions around the technology.

Facial Recognition, Privacy

Decipher Podcast: Rich Mogull

Rich Mogull, CEO of Securosis and a longtime paramedic and disaster medic, joins Dennis Fisher to discuss the mindsets required to prepare for and respond to both physical disasters and security incidents.

Podcast

Marriott Discloses New Data Breach

Marriott says 5.2 million customers may be affected by a new data breach disclosed today.

Data Breaches