US warns of Iranian cyber threat
The DHS has issued three warnings in the last few days encouraging people to be on alert for physical and cyber attacks […]
Facebook bans deepfakes, but not cheapfakes or shallowfakes
Quick-n-sleazy edits are still OK, such as the 75% slowdown that made Nancy Pelosi slur or the edit that turned Joe Biden […]
New SHA-1 Attack
There’s a new, practical, collision attack against SHA-1: In this paper, we report the first practical implementation of this attack, and its […]
Las Vegas Suffers Cyberattack on First Day of CES
The attack, still under investigation, hit early in the morning of Jan. 7. ——– Free High Security Email from Sigma
Developers Still Don’t Properly Handle Sensitive Data
The top classes of vulnerabilities for 2019 indicate that developers still don’t correctly sanitize inputs, nor protect passwords and keys as they […]
Google’s Project Zero Policy Change Mandates 90-Day Disclosure
The updated disclosure policy aims to achieve more thorough and improved patch development, Google reports. ——– Free High Security Email from Sigma
TikTok Bugs Put Users’ Videos, Personal Data At Risk
Researchers found it was possible to spoof SMS messages from TikTok and exploit an API flaw that could grant access to users’ […]
In App Development, Does No-Code Mean No Security?
No-code and low-code development platforms are part of application development, but there are keys to making sure that they don’t leave security […]
The “Art of Cloud War” for Business-Critical Data
How business executives’ best intentions may be negatively affecting security and risk mitigation strategies — and exposing weaknesses in organizational defenses. ——– […]
CES – Taking a smart city for a test drive
No one has a road map for securing a connected city – but there should be a whole atlas of such maps […]