Trend Micro report highlights supply chain dangers of the coming decade
UK privacy watchdog struggles to collect from nuisance call companies
“If privacy matters, it should matter to the phone your life is on.” So says Apple in their recent ads about Privacy on the iPhone and controlling the data you share—but many of the security features they highlight are opt-in, and users often don’t know when or how to activate them. But hey… we got...
CEO claims lives could be at risk following $14m demand
Politician’s Facebook post contravened Singapore’s new Online Falsehoods and Manipulation Act
At Trail of Bits, we make a significant effort to stay up to date with the academic world. We frequently evaluate our work through peer-reviewed conferences, and we love to attend academic events (see our recent ICSE and Crypto recaps). However, we consistently see one recurring issue at these acade...
Britain’s Ministry of Justice is seeking help to build a centralized cybersecurity log
Contraception and safe abortion services provider earns cyber-safety certification
Imagine reducing the amount of code and time needed to test software, while at the same time increasing the efficacy of your tests and making your debugging tasks easier—all with minimal human effort. It seems too good to be true, but we’re going to explain how test-case reduction can do all this (a...
How businesses of all sizes can use attack frameworks
Malwarebytes spots novel use of digital skimming
The Trail of Bits Assurance practice has received an influx of Go projects, following the success of our Kubernetes assessment this summer. As a result, we’ve been adapting for Go projects some of the security assessment techniques and tactics we’ve used with other compiled languages. We started by...
The lack of encryption on the web is a bug to be fixed
Users can sign-up for strong authentication without phone number
Elasticsearch server contained info harvested by aggregation firms
Jamie Bartlett takes to the keynote stage at Infosecurity ISACA North America Expo and Conference
American restaurant chain is investigating unauthorized activity in its payment processing system
Hacker behind banking malware NeverQuest is handed a 4-year prison term
US retailer claims insurer didn’t pick up $74M cost of issuing new payment cards
Web giant limits targeting and bans deep fakes and political lying