Every week I hear about a new breach that lost millions or billions of accounts and “somebody” publishes them online. Do not forget to register at https://haveibeenpwned.com/ for real-time notification in case your email appeares somewhere online. Here is a new case of Sextorsion – it gets more technical this time. This is another very […]
The email below looks like a classical phishing trying to fool users to enter their details and get access to the Google account. But, if you check it, you will be redirected in two steps to an online Canadian pharmacy website. I wonder why so much trouble for a stupid Canadian pharma website? Do people […]
I know you subscribed manually on this site, but we need now to check that you are happy to continuing receiving emails from it. From the 25th of May 2018, the new Data Protection Law will apply (GDPR). To comply with this, I need to check that I have your permission to use your name(optional) […]
Did you receive this email too ? Twitter is telling us that despite the fact that they stored the just the hashes of the passwords in their DB, they have been logging the plain text password in their backend. Stupid ?! Hell yes! But the even more stupid thing is this: WHY DO THEY SEND […]
Source: https://www.mcafee.com/us/resources/reports/restricted/economic-impact-cybercrime.pdf In 2014, taking into account the full range of costs, CSIS estimated that cybercrime cost the world between $345 billion and $445 billion. As a percentage of global GDP, cybercrime cost the global economy 0.62% of GDP in 2014. Using the same methods, CSIS now believe the range is now between $445 billion and $600 billion. Our […]
If you’re confused by the avalanche of early reports, denials, and conflicting statements about the massive security issues announced in the last days, don’t worry — you’re far from the only one. Here’s what you need to know about Meltdown and Spectre, the two huge bugs that affect practically every computer and device out there. […]
I wrote 4 months ago (Aug 14) about the switch to HTTPS per default on the new site ITSecurityNews.info. A week ago I wrote about the experiment of enhancing the headers of the website to show full compatibility with HSTS. Experiment started: HTTPS for ITSecurityNews.info Moving to HSTS Now it is too early to […]
HTTP Strict Transport Security (HSTS) is a policy mechanism that allows a web server to enforce the use of TLS in a compliant User Agent (UA), such as a web browser. HSTS allows for a more effective implementation of TLS by ensuring all communication takes place over a secure transport layer on the client side. Most notably HSTS […]
I’ve seen a lot of articles on the web about how to browse the web while keeping your privacy. By that I mean, nobody knows who you are, what you are browsing, no history kept, no temporary files remaining on the machine. Most of the articles on the web are created to make advertising to […]
I wrote before about the Target Malware. Now I can also write about Phishing. Here is one for Dropbox: What is wrong with this email ? the contact me by extracting the user part in the email address (smustaca) The “Verify your email” goes directly to a phishing website. The text is rather […]
You must be logged in to post a comment.