October 2018 – Security

Announcing some security treats to protect you from attackers’ tricks

October 31, 2018November 2, 2018 by Google Security PR

Google Security PR

Posted by Jonathan Skelker, Product ManagerIt’s Halloween 🎃 and the last day of Cybersecurity Awareness Month 🔐, so we’re celebrating these occasions with security improvements across your account journey: before you sign in, as soon as you’ve entered your account, when you share information with other apps and sites, and…

Introducing reCAPTCHA v3: the new way to stop bots

October 29, 2018October 29, 2018 by Google Security PR

Google Security PR

Posted by Wei Liu, Google Product Manager[Cross-posted from the Google Webmaster Central Blog]Today, we’re excited to introduce reCAPTCHA v3, our newest API that helps you detect abusive traffic on your website without user interaction. Instead of showing a CAPTCHA challenge, reCAPTCHA v3 returns a score so you can choose the…

Free Cybersecurity training: my own list of materials

October 29, 2018 by Andrea Fortuna

Andrea Fortuna

There is a lot a material about Cybersecurity free available online.Yet, all too often this contents are rarely of high quality. In this post i want to share my own shortlist of (in my view) good quality online training courses. Hope it’s helpful! Cuckoo’s Egg Decompiled In the 1980’s, Cliff…

How to Use Metasploit’s Web Delivery Script & Command Injection to Pop a Shell

October 24, 2018 by drd_

drd_

One of the best ways to improve your skills as a hacker is to learn to combine different avenues of attack to achieve success. What if it were possible to get a victim to connect to our machine and execute a chosen payload on our behalf? This is indeed possible…

Another Windows 0-day flaw has been published on Twitter

October 24, 2018 by Peter Bright

Peter Bright

https://t.co/1Of8EsOW8z Here's a low quality bug that is a pain to exploit.. still unpatched. I'm done with all this anyway. Probably going to get into problems because of being broke now.. but whatever. — SandboxEscaper (@SandboxEscaper) October 23, 2018 SandboxEscaper, a researcher who back in August tweeted out a Windows…

How to make elections secure in the age of digital operatives

October 24, 2018 by Annalee Newitz

Annalee Newitz

Video by Chris Schodt, production by Justin Wolfson. (video link) In our latest episode of Ars Technica Live, we talk about election security. My guest was Alex Stamos, a researcher at Stanford who just happened to be the CSO at Facebook when the company discovered Russian operatives meddling in the…

New features: Filters, Stats and Torrents and Dataleaks

October 24, 2018 by BinaryEdge

BinaryEdge

For those of you that have been using our new service app.binaryedge.io, new features have been deployed over the last days, here are the release notes: Torrents By using the Torrents feature you get access to a new dataset, which allows you to see which torrents were downloaded by an…

Google tackles new ad fraud scheme

October 23, 2018October 23, 2018 by Google Security PR

Google Security PR

Posted by Per Bjorke, Product Manager, Ad Traffic QualityFighting invalid traffic is essential for the long-term sustainability of the digital advertising ecosystem. We have an extensive internal system to filter out invalid traffic – from simple filters to large-scale machine learning models – and we collaborate with advertisers, agencies, publishers,…

Android Protected Confirmation: Taking transaction security to the next level

October 19, 2018November 29, 2018 by Aaron Stein

Aaron Stein

Posted by Janis Danisevskis, Information Security Engineer, Android Security[Cross-posted from the Android Developers Blog]In Android Pie, we introduced Android Protected Confirmation, the first major mobile OS API that leverages a hardware protected user interface (Trusted UI) to perform critical transactions completely outside the main mobile operating system. This Trusted UI…

Building a Titan: Better security through a tiny chip

October 17, 2018November 29, 2018 by Google Security PR

Google Security PR

Posted by Nagendra Modadugu and Bill Richardson, Google Device Security Group[Cross-posted from the Android Developers Blog]At the Made by Google event last week, we talked about the combination of AI + Software + Hardware to help organize your information. To better protect that information at a hardware level, our new…

Meet Helm, the startup taking on Gmail with a server that runs in your home

October 17, 2018 by Dan Goodin

Dan Goodin

Enlarge (credit: Helm) There’s no doubt that Gmail has changed the way we consume email. It’s free, it gives most of us all the storage we’ll ever need, and it does a better job than most in weeding out spam and malware. But there’s a cost to all of this.…

Apple, Google, Microsoft, and Mozilla come together to end TLS 1.0

October 16, 2018 by Peter Bright

Peter Bright

Enlarge (credit: Indigo girl / Flickr) Apple, Google, Microsoft, and Mozilla have announced a unified plan to deprecate the use of TLS 1.0 and 1.1 early in 2020. TLS (Transport Layer Security) is used to secure connections on the Web. TLS is essential to the Web, providing the ability to…

Already facing an uphill misinformation fight, Facebook loses to scammers, too

October 16, 2018 by Dan Goodin

Dan Goodin

Enlarge / A partial screenshot of one of the profiles pushing an adult dating scam on Facebook. Responding to critics in the US Congress and elsewhere who say Facebook isn’t doing enough to stop the flow of disinformation, the social network in recent days has purged hundreds of accounts it…

Modernizing Transport Security

October 15, 2018October 17, 2018 by Google Security PR

Google Security PR

Posted by David Benjamin, Chrome networking*Updated on October 17, 2018 with details about changes in other browsersTLS (Transport Layer Security) is the protocol which secures HTTPS. It has a long history stretching back to the nearly twenty-year-old TLS 1.0 and its even older predecessor, SSL. Over that time, we have…

Google and Android have your back by protecting your backups

October 12, 2018November 29, 2018 by Google Security PR

Google Security PR

Posted by Troy Kensinger, Technical Program Manager, Android Security and PrivacyAndroid is all about choice. As such, Android strives to provide users many options to protect their data. By combining Android’s Backup Service and Google Cloud’s Titan Technology, Android has taken additional steps to securing users' data while maintaining their…

1 2 Next »