Watch the latest episode of our only-takes-a-minute security roundup video! This week: From old crypto bugs to the latest Windows security holes…
Tag Archives: Cryptography
SSCC 194 – Patch early? Patch often? This time, “Patch NOW!” [PODCAST]
Join Sophos experts Chester Wisniewski and Paul Ducklin for the latest episode of our weekly security podcast. From the very latest Update Tuesday to how we get rid of 10-year-old security holes, here’s the security news you can use.
Practical IT: What you need to know about email encryption
When email was invented over 40 years ago, no one thought about how to ensure the integrity of messages. Here’s what you need to know about securing email with the right kind of encryption.
TLS certificate blunder revisited – whither China Internet Network Information Center?
Just under three weeks ago, we wrote about a TLS certificate blunder by a Root Certificate Authority called CNNIC. We thought we’d revisit that story today to see how the Big Four browser makers responded to the lapse…
We TOLD you not to use WPS on your Wi-Fi router! We TOLD you not to knit your own crypto!
Belkin is the latest router vendor to be found relying on “non-secret secrets.” Paul Ducklin looks at the router equivalent of locking the key to the company safe in the top drawer of your desk…
Firefox issues brand new update to fix HTTPS security hole in new update
Firefox 37.0 added support for a security-enhancing feature in HTTP/2 known as Alternative Services. Unfortunately, the new feature had a rather bad HTTPS security hole all of its own…
Slack gets hacked – rolls out two-factor authentication after user database breach
Slack is the latest start-up to make a big media splash in one of the worst possible ways – by acknowledging a data breach that exposed its users to malicious hackers.
Serious Security: China Internet Network Information Center in TLS certificate blunder
TLS certificates are very important. In fact, you could say they are the cornerstone of online security, especially for e-commerce. So we thought we’d use a story about a recent certificate security blunder to remind you why…
SSCC 191 – Live in Ljubljana [PODCAST]
Chester is on the road again, this time to present at a conference in Slovenia. So this episode of the Chet Chat comes to you from an al fresco café in downtown Ljubljana…
Ransomware – should you pay?
The big question, usually left unanswered in technical discussions of ransomware, is, “Should you pay?” We help you make up your mind.