Why the Password Isn't Dead Quite Yet

Everyone hates the old ways of authentication. But while change is closer than ever, it comes with its own drawbacks...

A week in security (October 8 – 14)

Last week, we warned you away from some dubious Doctor Who streams, explained how Endpoint Detection and Response may not be enough, and explored what happens during a confusing supply chain story. We also showed you how to keep up with security, explained the risks of fake browser updates, and...

[SECURITY] Fedora 26 Update: LibRaw-0.18.6-1.fc26

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

Nmap OS Identification (NASL wrapper)

This plugin runs nmap to identify the remote Operating System. NOTE: This routine is only started as a last fallback if other more reliable OS detection methods failed. This routine also has a few additional drawbacks: - Depending on the exposed services on the target it might take a considerable...

Google Makes Full-Disk Encryption Mandatory for New Android 6.0 Devices

Yes, Google wants you to keep your bits and bytes as safe as possible through encryption. With the launch of Android 5.0 Lollipop last year, Google wanted to make full disk Encryption mandatory, but unfortunately, the idea did not go too well. However, Google thinks the idea will go right this...

Secure Boot in Windows 8 Worries Researchers

Windows 8, like Windows 7 and Vista before it, is being touted as the most secure version of Windows ever. In past releases, many of the security improvements have come through exploit mitigations such as ASLR and DEP and better software security practices during development. In Windows 8, howeve...

Researcher Finds Holes Aplenty in Wireless Chips

A new study from Prof. Avishai Wool of Tel Aviv University’s School of Electrical Engineering finds serious security drawbacks in chips that are being embedded in credit, debit and “smart” cards. The vulnerabilities of this electronic approach — and the vulnerability of the private information...

Microsoft's Threat Management Gateway is a mixed bag

Microsoft’s initial move into the security products market, the ISA Server, has evolved well beyond its firewall roots. Now known as the Threat Management Gateway, the product is being positioned as a comprehensive Web security gateway. But as Eric Ogren writes in his review of the Threat...