Discover and connect with journalists and influencers around the world, save time on email research, monitor the news, and more.
Recent: |
|
Past: |
|
ROBOT attack: The PKCS #1 v1.5 flaw discovered in 1998 still plagues TLS, as research reveals vendors don't even attempt to test for the vulnerability. → Read More
Not everyone needs to go to Black Hat and RSA, especially with the grand selection of smaller, local or specialized information security conferences. → Read More
Punishing GDPR penalties mean it's time to stop skimping on compliance, especially considering new 72-hour GDPR breach notification rule. → Read More
EU GDPR compliance calls for respecting the data, tracking the data down and keeping it encrypted, according to experts. → Read More
Bugcrowd CEO Casey Ellis explains how and why bug bounty programs work, as well as the path forward as they become more mainstream. → Read More
Confirming 68 million Dropbox passwords were exposed in 2012, the cloud provider continued to urge users to update credentials and enable 2FA. → Read More
Windows Subsystem for Linux adds the Windows Bash native Ubuntu command line to Windows 10, but will it increase the attack surface? → Read More
Browser vulnerabilities in Microsoft's Internet Explorer and Edge top August 2016 Patch Tuesday, plus more on the Windows 10 Anniversary update. → Read More
KeySniffer is a new wireless vulnerability, similar to MouseJack, that exposes wireless keyboard users to key sniffing, injection attacks. → Read More
ARIN chief John Curran talks IPv6 connectivity progress, IPv6 security issues and why IPv6 is set to take off. → Read More
'Httpoxy,' vulnerability in server-side web apps using HTTP_PROXY environment variable; experts say it was a responsible disclosure. → Read More
As use of encryption rises, firms increasingly deploy enterprise encryption strategies; also, Bart ransomware, IRS ends e-file PIN tool, and more. → Read More
The Angler exploit kit is bypassing Microsoft EMET version 5.5 to deliver Flash and Silverlight exploits on Windows 7. → Read More
Paul Vixie, Internet pioneer and architect of key DNS extensions, spoke with SearchSecurity about IPv6 NAT, IPv6 and the Internet of Things. → Read More
A serious ImageMagick vulnerability still raises questions regarding responsible disclosure, as the flaw exposes millions of websites to an actively exploited weakness. → Read More
Verizon Enterprise Solutions was hit by a breach, which saw 1.5 million customer contact records offered for sale. Customers face increased phishing attack risks. → Read More
At RSA Conference 2016, the top security startup will be named 'most innovative' in the RSA 2016 Innovation Sandbox competition. → Read More
News roundup: Google's anti-phishing effort ratchets up with stricter DMARC policy. Plus: Senate to vote on CISA, health care industry lags, and SHA-1 goes critical. → Read More