S

Softpedia News / Security

http://news.softpedia.com/newsRSS/Security-5.xml (RSS订阅地址)

Google Expands End-to-End Encryption for Gmail on the Web

Google has recently announced that Gmail for the web is getting client-side encryption for more customers. Already available for some Workspace subscribers, the client-side encryption in Gmail on the web is being expanded to Workspace Enterprise Plus, Education Plus, and Education Standard customers. Worth knowing, however, is that the feature remains exclusive to customers who enroll in the beta program, with Google not yet sharing an ETA as to when the broad availability is supposed to be reached. The Mountain View-based search giant explains that with end-to-end encryption, the content of emails, including the body and the attachments, can’t be decrypted, even if they are stored on Google servers. “Using client-side encryption in Gmail ensures sensitive data in the email body and attachments are indecipherable to Google servers. Customers retain control over encryption keys and the identity service to access those keys,” Google

2022/12/19
阅读更多

“Password” Continues to Be the Most Common Password in 2022 as Well

You’d think the time spent working from home in the last two years or so helped netizens across the planet figure out how to master the world of WWW in a more efficient manner. But new research from NordPass shows that despite so many people relying on an Internet connection for their daily activities, few actually care about the security of their data when they go online. As a result, “password” continues to be the number one password out there, with the aforementioned company claiming that this particular keyword was detected close to 5 million times in a 3TB database. It takes less than one second to crack this password, the company says. “123456” is currently the second most-used password worldwide, followed by its longer sibling known as “123456789” because, you know, hackers don’t know how to count to 10. “There’s more than one way to get swindled on Tinder: using “tinder” as your password is mo...

2022/11/21
阅读更多

PayPal Officially Announces Support for Passkeys

PayPal has officially announced the support of passkeys, as the company wants to increase the security of user accounts and therefore provide customers with a more secure method of logging in. Stepping away from passwords is something that many tech companies are trying to do these days, and as a founding member of the FIDO Alliance, PayPal is obviously one of the big names investing in this direction. Numbers cited by PayPal show that 81 percent of the 2.6 billion hacked records in 2017 were powered by password stealing and guessing. As a result, replacing passwords with a more secure way to log in is essential, especially given PayPal offers financial services. “Passkeys will also help more consumers complete their purchases with PayPal - once PayPal users create a passkey, they won't have to remember their password, allowing them to check out with greater ease. According to a recent survey of U.S. consumers, 44% of consumers have abandoned an online purchase be...

2022/10/24
阅读更多

Rockstar “Extremely Disappointed” to See GTA 6 Gameplay Leaking to the Web

The next iteration of Grand Theft Auto made the headlines the past weekend following a major leak that provided the world with an early look at the highly anticipated game. Needless to say, given Rockstar barely talks about GTA 6, it’s no surprise that so many people are eager to see what the game is all about. The leak was therefore received with much enthusiasm by fans from all over the world. But according to Rockstar, the content we got to see was actually early development footage. The company claims its servers were hacked, as someone managed to break into its systems and steal the GTA content. “We recently suffered a network intrusion in which an unauthorized third party illegally accessed and downloaded confidential information from our systems, including early development footage for the next Grand Theft Auto. At this time, we do not anticipate any disruption to our live game services nor any long-term effect on the development of our ongoing projects,” ...

2022/9/19
阅读更多

Revolut Hacked, User Data Exposed

Revolut has recently been the target of a cyberattack, with the company confirming in emails sent to customers that a small number of user accounts have actually been exposed. Worth knowing is that the breach didn’t result in any theft of funds, but on the other hand, customer data has been exposed. The company, however, didn’t reveal what information has been exposed, but it says it’s now reaching out to every user to inform about the breach. “Data varied for different customers. We will contact them individually if necessary,” Revolut says. On the other hand, no card details, PINs, or passwords were accessed, Revolut explains. The company claims only 0.16 percent of the customers were affected, and at this point, no action is required on the user side to further protect accounts. “We recently received a highly targeted cyber attack from an unauthorized third party that may have ...

2022/9/19
阅读更多

LastPass Says Hackers Accessed Its Systems for Just 4 Days

LastPass has provided more information on the security incident that was discovered earlier this year, and in an update published this week, the company says that it was managed to confirm that hackers accessed its systems for just 4 days. The whole thing happened in August 2022, LastPass says, and once again, it hasn’t found any evidence that the malicious actors accessed any customer data or encrypted password vaults. By the looks of things, the breach was possible after the hackers managed to compromise the system of a developer. “Our investigation determined that the threat actor gained access to the Development environment using a developer’s compromised endpoint. While the method used for the initial endpoint compromise is inconclusive, the threat actor utilized their persistent access to impersonate the developer once the developer had successfully authenticated using multi-factor authentication,” LastPass

2022/9/18
阅读更多

LastPass Confirms Security Breach, No User Data Exposed

LastPass has publicly acknowledged a security incident, revealing that a developer account was compromised, with cybercriminals managing to access portions of the source code and some proprietary technical information. The security breach took place earlier this month, LastPass says, and after an investigation, the company was able to confirm that no user data was exposed. With the help of a cybersecurity and forensics firm, LastPass says it determined that users’ master passwords and vaults haven’t been compromised – for what it’s worth, the master passwords aren’t being stored on LastPass servers in the first place. “Two weeks ago, we detected some unusual activity within portions of the LastPass development environment. After initiating an immediate investigation, we have seen no evidence that this incident involved any access to customer data or encrypted password vaults,” Last...

2022/8/26
阅读更多

Google Chrome Gets Emergency Security Update

Google has released an emergency security update for Google Chrome, as the company is patching a 0-day vulnerability in the browser. While not too many specifics have been offered, the vulnerability is already being exploited in the wild, with Google obviously urging its users to install the latest update as soon as possible. The new version is Chrome 103.0.5060.114, and if you want to install it today, simply check for updates in the browser’ settings page. According to Google itself, the new browser update comes to resolve three different security vulnerabilities, all of which are rated with a high severity rating.   High CVE-2022-2294: Heap buffer overflow in WebRTC. Reported by Jan Vojtesek from the Avast Threat Intelligence team on 2022-07-01 High CVE-2022-2295: Type Confusion in V8. Reported by avaue and Buff3tts at S.S.L. on 2022-06-16 High CVE-2022-2296: Use after free in Chrome OS Shell. Reported by Khalil Zhani on 2022-05-19

2022/7/5
阅读更多

Mozilla Releases Firefox 100.0.2 With Critical Security Fixes

Mozilla has just released a new Firefox version, and this time, the minor revision is actually pretty big news in terms of security. This is because the new update, which brings the browser to version 100.0.2, includes two critical security fixes, so obviously, everybody is recommended to install it as soon as possible. Mozilla has flagged both security fixes with a critical severity rating, revealing they were reported by researcher Manfred Paul of Trend Micro’s Zero Day initiative. The first bug is a prototype pollution in Top-Level Audit implementation. “If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context,” Mozilla says. The second vulnerability, which is documented in CVE-2022-1529, is an untrusted input used in Javascript object inde...

2022/5/22
阅读更多

India Forces All VPN Providers to Log and Store User Data

One of the benefits of using a VPN service to connect to the web is the enhanced privacy, as such a solution basically makes it possible to stay anonymous and without revealing any information about you or your device. Of course, most people are looking for VPN services that don’t collect any data about their activity while connected to the servers, and in the last couple of years, more and more providers have been betting big on such capabilities. India, however, has had enough with no-log VPNs, as the country has passed a new law that will require all providers not only to store information about their users but also to share it with the government when required. No-log VPNs Coming into effect on June 27, the new directive forces VPN services to store the data on their servers for no less than five years, as per Neo...

2022/5/4
阅读更多

推荐订阅

WeLiveSecurity

Blaze's Security Blog

SANS Blog

ClearSky Cyber Security

360 Netlab Blog - Network Security Research Lab at 360