SEARCH
Archive
Mozilla to Require 2FA for Add-On Developers
Mozilla will soon require add-on developers to enable 2FA for their accounts in an effort to defeat supply chain attacks.
Persistent Cookies Can Prove Troublesome for AWS
A researcher found that some AWS authentication cookies remain valid for up to 12 hours even after a user has changed the password and logged out.
Security Basics Prove Highly Effective at Stopping Account Takeovers
New Google research on account takeovers found that basic account hygiene can defeat the vast majority of attacks.
Google Warns of Flaw in Some Titan Security Keys
A weakness in the Bluetooth pairing protocol in some Titan keys can leave them open to hijacking.
Mozambique’s Scheme to End SIM Swap Fraud
Mobile payments are very popular in African companies and SIM card fraud is a massive problem. At the Kaspersky Security Analyst Summit, CERT Mozambique discussed how the banks and mobile operators worked together to ensure thieves didn't loot customer accounts just by stealing phone number.