NSA warns enterprises over TLS traffic inspection risks: do it once, and do it well
US spy agency issues an alert to enterprise organizations that decrypt TLS-protected communications as part of the security strategy.
US spy agency issues an alert to enterprise organizations that decrypt TLS-protected communications as part of the security strategy.
Massive GDPR fines for data breaches were the order of the week as British Airways copped a £183m ($A328m) fine for a hack of its website last year.
David Braue | 17 Jul | Read more
Web accelerator and CDN provider Cloudflare has become such a critical component of the web that when it goes down, so do many others.
Memcached abuse can amplify traffic attacks by tens of thousands of times.
Basic DDoS protection will soon be a given for apps run on AWS and Azure infrastructure, but intel will cost more.
Phishers ramp up use of free digital certificates to trick victims into giving away their passwords.
A newly found piece of malware targeting web servers running on Linux machines is scanning popular content management systems (CMS) for vulnerabilities to expand a botnet.
Tesla has patched six flaws in its Model S vehicles as it finds its new head of security from the ranks of an elite group of hackers in Google’s Project Zero.
LAS VEGAS - Earlier this year, a disgruntled reseller leaked the source code for version 2.0 of the RIG exploit kit.
Steve Ragan | 04 Aug | Read more
E-commerce platform Magento has stressed its customers need to update to the latest version of its software following reports of new attacks that could expose credit card details.
Adobe has joined a bug disclosure program that invites researchers to report new flaws in its web applications. What can hackers expect for their work? Not a cash bounty.
Microsoft today updated its free Windows Defender and Security Essentials antivirus programs with a signature that sniffs out and deletes the rogue certificate linked to Superfish Visual Discovery, the "crapware" that blew up in Lenovo's face this week.
Gregg Keizer | 21 Feb | Read more
A sophisticated distributed denial-of-service (DDoS) blocked Dutch government and privately run commercial sites from the public for more than 10 hours Tuesday.
Loek Essers | 12 Feb | Read more
Google researchers have found a severe flaw in an obsolete but still used encryption software, which could be exploited to steal sensitive data.
Jeremy Kirk | 15 Oct | Read more
The number of attempts by hackers to compromise computers through the Shellshock vulnerability is rising, but companies have options for defending against attackers.
Antone Gonsalves | 30 Sep | Read more