Search
Items tagged with: infosec
More details:
https://updatedsecurity.com/topic/291-huge-increase-in-malicious-advertising-on-google/?a=1
#infosec #cybersecurity #malware
Huge Increase in Malicious Advertising on Google
It seems like after Microsoft moved to limit Office Macros, there has been a resurgence in other techniques such as malvertising and iso attachments.MalwareTech (UpdatedSecurity)
Journalists, refugees, people at-risk and from marginalized groups, and we all, really, need to *know* that tech people supporting them cannot be legally forced to disclose the (often very personal or sensitive) data they gain access to while providing tech support.
Data that is shared with them in confidence, and which is often necessary to render tech help at all.
#InfoSec #Legal
#OpenSource #passwordManager #LastPass
cc @keepassxc
I think those people have not been at this long.
All companies eventually get hacked. All companies eventually will be breached, and it's not if; it's when.
And if you are a company storing millions of passwords, you better believe you are being attacked constantly.
Given that world, I want a company that:
- is transparent and lets their users know immediately when something is up and gives as many details as they can.
- can actually detect incidents and has a solid process to follow in dealing with them and communicating about them
It merely means they either a) can't detect incidents or b) are hiding them from you
If you are using a password manager that is silent about breaches, near misses, incidents, etc., That should be cause for concern.
Why can't we have nice things?
Microsoft. Microsoft is why we can't have nice things.
Pridefall Discord Attack 2022 | How To Recover From Scams?
Pridefall Discord Attack is a cyber-attack event that takes place on all social media platforms to harass and target the LGBTQ+ community. Read along with this page and you will learn detailed information about the Pridefall Discord Attack 2022.Shivangi Gupta (Pathofex)
https://web.archive.org/web/20180429220059if_/https://twitter.com/tmobileat/status/982187919061303296
#InfoSec #TMobile
T-Mobile Austria on Twitter
“@Korni22 @c_pellegrino @PWTooStrong @Telekom_hilft @Korni22 What if this doesn't happen because our security is amazingly good? ^Käthe”Twitter
https://www.digitalrights.ie/facebook/
#privacy #security #infosec
https://scotthelme.co.uk/introducing-another-free-ca-as-an-alternative-to-lets-encrypt/
It's always good to have alternatives around. ZeroSSL appears to be a European company that now provides free TLS certificates using the ACME protocol.
#TLS #SSL #CA #infosec #letsencrypt
On the privacy of online login forms inputs
I'm surprised but not shocked by this result. It seems to me that many people are confused about why online login forms have two fields but only one of them hides the input.
On one hand, if all the credentials are meant to be private, why not add a third or a fourth input field with more private stuff? This would be more secure, right? On the other hand, if someone is using a weak password, what is the likelihood their login is easily guessable as well?
I personally believe online login forms have two fields for two different kind of data: an identifier that shouldn't be considered private, because the password/phrase field is already there for that specific purpose. As a result, I fully support letting users fill the login field with as many different identifiers they can have, including email addresses and public usernames, because it is massively more convenient without compromising on security since there is a password.
Friends, enemies, I bought this a couple of months ago and have really enjoyed the content so far - highly recommended if you're interested in #infosec