Security news that informs and inspires

All Articles

2376 articles:

Sign In With Apple Makes Privacy a Centerpiece

Sign in with Apple is coming in iOS 13, and the company will allow users to share unique, disposable email addresses with apps to help prevent data collection.

Apple, Ios

MacOS Mojave Flaw Could Lead to Abuse of Trusted Apps

In macOS Mojave, a problem in the way the OS performs application validation could let an attacker run a modified version of a trusted app, bypassing local security mechanisms.

Apple

Q&A: Joseph Menn on the Cult of the Dead Cow

In his new book on the Cult of the Dead Cow hacking group, Joseph Menn describes the environment that led to the cDc's creation and why the group remains so influential after more than 35 years.

Hacking

Google Turning On Confidential Mode by Default in G Suite

Google is planning to enable confidential mode by default for enterprise G Suite customers in June.

Google

Decipher Podcast: Joseph Menn

Joseph Menn, author of a new book on the Cult of the Dead Cow hacking group, joins Dennis Fisher to discuss the group, its influence, and why he thinks the cDc has survived so long.

Podcast

New York Considers Its Own GDPR-Style Data Law

New York’s lawmakers are on the brink of passing a data security law that will give New Yorkers more information about how their data is being used and when it has been compromised.

Government, Data Breach Notification

GitHub Brings Automated Fixes With Dependabot

GitHub rolled out several new features designed to help developers write secure code at its recent GitHub Satellite conference last week in Berlin.

Software Security, Appsec, Microsoft

Researcher Finds Mac Gatekeeper Bypass

The OS X Gatekeeper security system can be bypassed with a new technique developed by researcher Filippo Cavallarin.

Apple

Docker Bug Allows Root Access to Host File System

A vulnerability in all versions of the Docker platform can give an attacker full read and write access to the host file system.

Docker

New Bills Would Require Warrants for Border Device Searches

Bills in the House and Senate would prevent warrantless searches of Americans' devices at the border.

Privacy, Government

Do Not Track Act Would Give Users More Power

The Do Not Track Act introduced by Sen. Josh Hawley would establish a single, enforceable mechanism for people to prevent data collection and online tracking.

Privacy

Moody’s Revises Equifax Outlook Post-Breach

Data breaches can be costly, both in terms of recovery, lost productivity, and regulatory fines. Moody’s revising its outlook on Equifax proves a breach breach can be detrimental to the company’s financial future.

Data Breaches, Risk

Attackers Are Signing Malware With Valid Certificates

There used to be a time when malware signed with a legitimate certificate was the mark of a sophisticated, nation-state-backed attacker. Now anyone can have signed malware.

Malware, Certificate Authority

Google Stored Some G Suite Passwords in Plain Text

Some Google G Suite customers' passwords were stored in plain text on the company's network since 2005.

Google

Firefox Now Blocks Cryptominers and Fingerprinters

In Firefox 67, Mozilla has moved to block cryptominers and browser fingerprinters, which track users across the web.

Privacy