Skip to main content

Security

HTTPS traffic increasing, says Google report

posted onNovember 7, 2016
by l33tdawg

As Google continues to push for widespread migration across the web to HTTPS, the search giant has released its latest Transparency Report, which now includes a section that measures traffic on HTTPS web pages.

The Real Hacker Threat to Election Day? Data Deception and Denial

posted onNovember 7, 2016
by l33tdawg

Hacks, data leaks, and disinformation have all added to the chaos of one of the most contentious elections in history. US intelligence agencies have even accused Russia of perpetrating some portion of the digital meddling. And now reports indicate that officials are preparing for worst-case cybersecurity scenarios on November 8. But what might those election day digital threats realistically look like?

Update your Belkin WeMo devices before they become botnet zombies

posted onNovember 7, 2016
by l33tdawg

Owners of WeMo home automation devices should upgrade them to the latest firmware version, which was released this week to fix a critical vulnerability that could allow hackers to fully compromise them.

The vulnerability was discovered by researchers from security firm Invincea in the Belkin WeMo Switch, a smart plug that allows users to remotely turn their electronics on or off by using their smartphones. They confirmed the same flaw in a WeMo-enabled smart slow cooker from Crock-Pot, and they think it's probably present in other WeMo products, too.

Hacker discovers Gmail vulnerability that leaves any account open to compromise

posted onNovember 7, 2016
by l33tdawg

A student and security researcher from Pakistan has found a serious issue with Gmail that makes it possible for a hacker to take over any email address.

The vulnerability relates to the way Google handles the linking of a primary Gmail account to another email address for the purposes of message forwarding. In just a few steps it was -- before Google fixed the problem -- possible to take over ownership of an email address by tricking the system into sending out the necessary verification code.

GCHQ wants internet providers to rewrite systems to block hackers

posted onNovember 7, 2016
by l33tdawg

GCHQ is urging internet providers to change long-standing protocols to stop computers from being used to set off large-scale cyber attacks.

The Government’s cyber-defence arm said it plans to work with networks such as BT and Virgin Media to rewrite internet standards to restrict “spoofing” - a technique that allows hackers to impersonate other computers and manipulate them to carry out anonymous attacks.

Insiders have always been a security risk, but it's not just the malicious ones you need to keep an eye on.

posted onNovember 7, 2016
by l33tdawg

The trusted insider has always been a security risk - whether an executive with access to sensitive information or an administrator on an enterprise network.

According to a recent report from the Ponemon Institute, 56 per cent of security practitioners surveyed said that company insiders are the primary cause of security breaches and 72 per cent were not confident they could control employee access to sensitive information.

User danger declines as two thirds of Chromistas now use HTTPS

posted onNovember 7, 2016
by l33tdawg

Two in three web pages served over the world's favourite web browser Chrome are now secured with HTTPS, Google says.

The good news applies to Chrome on the desktop and signifies progress in the long-hoped-for decline of insecure cleartext browsing.

Chrome security bods Adrienne Porter Felt and Emily Schechter say all platforms of desktop Chrome page loads are made over HTTPS. "More than half of pages loaded and two-thirds of total time spent by Chrome desktop users occur via HTTPS, and we expect these metrics to continue their strong upward trajectory," the pair said.

DDoS attack with Mirai malware 'killing business' in Liberia

posted onNovember 4, 2016
by l33tdawg

The malware behind last month's massive internet disruption in the U.S. is targeting Liberia with financially devastating results.

This week, a botnet powered by the Mirai malware has been launching distributed denial-of-service (DDoS) attacks on IP addresses in the African country, according to security researchers.