December 28, 2016

Google Is Ga-Ga Over Security Key

2 min read - Google's new Security Key protects users more effectively than simple two-factor authentication (2FA) without the added cost of smart hardware.

November 21, 2016

Browsers to End SHA-1 Support in 2017

2 min read - Some of the biggest names in the web browser game — namely, Google, Microsoft and Mozilla — plan to stop accepting insecure SHA-1 certificates in 2017.

November 10, 2016

WoT Privacy Breach: Trust Tanks as Browser Add-On Caught Selling User Data

2 min read - The WoT privacy breach highlights the commonplace nature of third-party data selling and frequent failure to read the fine print in user agreements.

November 1, 2016

Certificate Transparency Will Be Mandatory in Chrome

2 min read - First organized in 2005, The CA/Browser Forum is a voluntary group of certification authorities (CAs), vendors of internet browser software and suppliers of other applications that use X.509 v.3 digital certificates for SSL/TLS and code signing. In other words, it’s…

October 3, 2016

Mobile Security News Roundup: Top Stories From September

2 min read - September was another huge month for mobile security news. Headlines included new security features for Android devices and the launch of a $12,000 phone.

September 29, 2016

Extermination Effort: New Content Security Policy Tools Target XSS Cockroach

2 min read - Google recently introduced new tools for developers to help them create a better web content security policy. Specifically, the initiatives should target cross-site scripting (XSS) vulnerabilities, which Threatpost said are the “cockroach of web application security,” forever skittering away into…

September 19, 2016

New Google API Will Securely Verify Chrome Devices

2 min read - The new Google API allows a network service to obtain a hardware-backed cryptographic guarantee of the identities of a device and the user accessing it.

September 5, 2016

Mobile Security News Roundup: Top Stories From August

2 min read - August saw many shifts in the mobile security landscape, including several new launches, threats and other snippets providing insight into upcoming trends.

August 3, 2016

WPAD Leaks Could Mean Flood of URL Trouble

2 min read - WPAD is an easy way to grab proxy information and get browsers online. When it comes to security, however, this protocol doesn't make the grade.

July 6, 2016

Android Encryption Fails Thanks to Qualcomm Chips

2 min read - A security researcher discovered that the Qualcomm-made chips at the center of Android encryption can be exploited in a sophisticated attack.