Security news that informs and inspires

All Articles

2201 articles:

Decipher Podcast: Adam O’Donnell

Adam O'Donnell, a longtime security engineer, startup founder, and member of the Cult of the Dead Cow, joins Dennis Fisher to talk about the group, its influence, and his career in security.

Podcast

Large BGP Leak Hits European Mobile Carriers

A BGP route leak by a hosting company affected traffic from several European mobile carriers this week.

BGP

GoldBrute Botnet Is Brute-Forcing Windows RDP

A new botnet is scanning the internet and brute-forcing Remote Desktop Protocol connections to compile a list of vulnerable hosts, usernames, and passwords.

Remote Access, RDP, Botnet

Odd Bug Haunts Exim Mail Agent

The Exim MTA used in many Linux distributions contains a vulnerability that is trivially exploitable locally and can be exploited remotely in some cases.

Vulnerabilities

NSA Joins Chorus Urging Speedy Patching for BlueKeep

The United States NSA urging enterprises and individuals to install the update addressing the BlueKeep vulnerability on Windows systems as soon as possible.

Patch, Microsoft, Vulnerability

Sign In With Apple Makes Privacy a Centerpiece

Sign in with Apple is coming in iOS 13, and the company will allow users to share unique, disposable email addresses with apps to help prevent data collection.

Apple, Ios

MacOS Mojave Flaw Could Lead to Abuse of Trusted Apps

In macOS Mojave, a problem in the way the OS performs application validation could let an attacker run a modified version of a trusted app, bypassing local security mechanisms.

Apple

Q&A: Joseph Menn on the Cult of the Dead Cow

In his new book on the Cult of the Dead Cow hacking group, Joseph Menn describes the environment that led to the cDc's creation and why the group remains so influential after more than 35 years.

Hacking

Google Turning On Confidential Mode by Default in G Suite

Google is planning to enable confidential mode by default for enterprise G Suite customers in June.

Google

Decipher Podcast: Joseph Menn

Joseph Menn, author of a new book on the Cult of the Dead Cow hacking group, joins Dennis Fisher to discuss the group, its influence, and why he thinks the cDc has survived so long.

Podcast

New York Considers Its Own GDPR-Style Data Law

New York’s lawmakers are on the brink of passing a data security law that will give New Yorkers more information about how their data is being used and when it has been compromised.

Government, Data Breach Notification

GitHub Brings Automated Fixes With Dependabot

GitHub rolled out several new features designed to help developers write secure code at its recent GitHub Satellite conference last week in Berlin.

Software Security, Appsec, Microsoft

Researcher Finds Mac Gatekeeper Bypass

The OS X Gatekeeper security system can be bypassed with a new technique developed by researcher Filippo Cavallarin.

Apple

Docker Bug Allows Root Access to Host File System

A vulnerability in all versions of the Docker platform can give an attacker full read and write access to the host file system.

Docker

New Bills Would Require Warrants for Border Device Searches

Bills in the House and Senate would prevent warrantless searches of Americans' devices at the border.

Privacy, Government