December 2, 2015 VTech Breach: Is Stealing More Than 6 Million Accounts Now Child’s Play for Malicious Actors? 3 min read - Chinese toy manufacturer VTech suffered a hack that put the personal information of adults and children at risk. How can people protect themselves?
December 1, 2015 Port Fail Vulnerability Exposes Real IP Addresses of VPN Users 3 min read - A vulnerability in the way many VPN providers configure their port forwarding service lets attackers unmask the real IP addresses of users.
December 1, 2015 All Patched Up: Software Catches a Break Over Holiday Weekend 2 min read - Lenovo, LinkedIn and Zen Cart addressed serious software flaws during the holiday weekend, but now users can rest assured that vulnerabilities are patched.
November 25, 2015 Encryption and the Internet of Things: Mission Impossible? 2 min read - Researchers have again defeated the Algebraic Eraser, used to encrypt devices on the Internet of Things. Is security impossible on the IoT?
November 24, 2015 Hooked: Phishing Scheme Reels in World Bank Site 3 min read - A World Bank website became an accessory to a phishing attack, which wound up revoking the Bank's Extended Validation SSL certificate.
November 19, 2015 LastPass Gets a Failing Grade From Researchers Who Say Passwords Could Be Exposed 2 min read - Password manager LastPass was recently discovered to have serious security flaws that could leave the door open for cybercriminals.
November 18, 2015 In the Bag? Secure Chip-and-PIN Card Adoption Still Slow in US 2 min read - Organizations in the U.S. have been slow to adopt chip-and-PIN payment cards, leading nine state attorneys general to voice their support for the cause.
November 18, 2015 Server Hacking Against vBulletin Users Escalates Following Emergency Patch 2 min read - Cybercriminals were reportedly going on a server hacking spree weeks after vBulletin patched a major vulnerability in its popular online forum software.
November 18, 2015 App Developers’ Use of Back-end Cloud Services Puts Sensitive Data at Risk 2 min read - App developers love using BaaS providers to store and host the data they collect from users, but researchers said it puts sensitive data in danger.
November 17, 2015 Google Plans Gmail Alerts That Flag Unencrypted Connections 2 min read - Google announced that it will alert users when they receive emails sent via unencrypted connections in order to increase their overall security posture.