Security news that informs and inspires

2376 articles by

Phishing Kit Developers Operate Like Regular Software Shops

Phishing is a numbers game—and the longer a kit remains hidden and active, the longer the attack can run and net more victims. The developers behind popular phishing kits are adopting best practices from the business world to streamline operations and make money.

Phishing, Phishing Kits

MongoDB Moves Encryption Out of the Server

MongoDB engineers spent the last two years developing field-level encryption, a scheme that would reduce the damage after a data breach.

Database, Mongodb

Seeking Validation in a Hostile World

The domain control validation process relies on protocols and systems that are susceptible to compromise, so Cloudflare is hoping to fix that with a new service that validates certificates from multiple points.

DNS Security

The League of Entropy Forms to Offer Acts of Public Randomness

Cloudflare and several other members have formed the League of Entropy to offer a quorum of public randomness beacons.

Cryptography

Linux Worm Hits Unpatched Exim Servers

It took only a few days for a Linux worm to start exploiting the vulnerability in the Exim mail transfer agent. Microsoft said some Azure customers have already been affected.

Linux, Malware, Microsoft