BitCrypt Ransomware Deploying Weak Crypto
A new piece of ransomware known as BitCrypt is deploying a brand of encryption that is incredibly weak and easily broken.
Cryptography
Apple Fixes Certificate Validation Flaw in iOS
Apple on Friday quietly pushed out a security update to iOS that restores some certificate-validation checks that had apparently been missing from the operating system for an unspecified amount of time. Apple released iOS 7.06 on Friday and the only content in the update was a small security fix that the company said addressed a […]
‘Our Threat Model Has Changed’
PUNTA CANA–The golden era of bulk surveillance through the acquisition of phone records and other data from telecommunications companies may already be fading, but the larger threat to privacy and security is just beginning to emerge: the use of legal tools and coercion to get around encryption and other safeguards. One of the main results […]
Researchers have discovered a relatively new way to distribute malware that relies on reading malicious obfuscated JavaScript code stored in a PNG file’s metadata to trigger iFrame injections.
The OpenBSD Project pushed out a new build of the security suite OpenSSH this week, adding a new private key format, a new transport cipher and fixing 15 bugs in the Secure Shell.
Honey Encryption is an encryption tool in the works that fools an attacker with bogus decrypted data that looks like it could be a plausible guess at an encryption key or password.
The opinions and rhetoric on both sides of the Snowden story have only grown more strident and inflexible, leaving no room for nuanced opinions or the possibility that Snowden perhaps is neither a traitor nor a hero but something else entirely.
A group of six Congressmen have asked President Barack Obama to remove James Clapper as director of national intelligence as a result of his misstatements to Congress about the NSA’s dragnet data-collection programs. The group, led by Rep. Darrell Issa (R-Calif.), said that Clapper’s role as DNI “is incompatible with the goal of restoring trust […]
Dozens of cryptography and security pioneers write an open letter to President Obama condemning NSA surveillance.
The attackers who infiltrated Target’s network several weeks ago and made off with 40 million credit and debit card numbers used a multi-stage attack, funneling their stolen data through an FTP server and then a VPS server in Russia. It took more than two weeks, but the attackers eventually exfiltrated about 11 GB of data, researchers say.
