August

The latest in information security (in English and Dutch)

2014-08-20

• Graham Cluley (Tripwire State of Security): Dropbox beefs up security of shared links - for business users, at least
• Adrian Mettler, Vishwanath Raman and Yulong Zhang (FireEye): SSL vulnerabilities - Who listens when Android applications talk? | Via
• Risk Based Security, Open Security Foundation: Data breach quick view - Data breach trends during the first half of 2014 [PDF] | News release | Via

2014-08-19

• Michael Adkins (Facebook): Massive growth in SMTP STARTTLS deployment | Via
• Daniel Chipiristeanu (Microsoft Malware Procection Center): The fall of rogue antivirus software brings new methods to light | Via

2014-08-15

• Brian Krebs (Krebs on Security): Why so many card breaches? A Q&A
• Brian Krebs (Krebs on Security): How secure is your security badge?
• Out-law.com: Most UK consumers resistant to mobile banking amidst security concerns
• Max Smolaks (Tech Week Europe): Android factory reset does not erase data, warn researchers | Related story at BBC News
• Rejo Zenger (BoF): Het Tor-netwerk helpen, zonder iemand dwars te zitten

2014-08-14

• John Zorabedian (Naked Security): The top 5 privacy failures - what's the most epic fail of all [POLL]

2014-08-13

• Matthew Green (A few thoughts on cryptographic engineering): What's the matter with PGP? | Via

Earlier / undated

• FTC: Fandango, Credit Karma settle FTC charges that they deceived consumers by failing to securely transmit sensitive personal information [Related information linked from this page] | Via
• Branden Ghena, William Beyer, Allen Hillaker, Jonahtan Pevarnek, and J. Alex Halderman: Green lights forever - Analyzing the security of traffic infrastructure [PDF] | Via
• PCI Security Standards Council: PCI Data Security Standard (PCI DSS) - Information Supplement - Third-party security assurance [PDF] | Via
• Trend Micro: Turning the tables on cyber attacks - Responding to evolving tactics [PDF] | Via

[Permalink]

The latest in information security (in English and Dutch)

2014-08-11

• Lisa Vaas (Naked Security): Most people think public Wi-Fi is safe. Seriously?

2014-08-05

• RedSocks: Malware trend report, Q2 2014 [PDF] | Via

Earlier / undated

• Andrei Costin, Jonas Zaddach, Aurélien Francillon and Davide Balzarotti: A large-scale analysis of the security of embedded firmwares [PDF] | Project website | Via

[Permalink]

The latest in information security (in English and Dutch)

2014-08-06

• Graham Cluley: Security firm that revealed "billion password" breach demands $120 before it will way if you're a victim | Related blog post
• Andy Greenberg (Wired): How hackable is your car? Consult this handy chart
• John Hawes (Naked Security): 1.2 billion logins scooped up by CyberVor hacking crew - what you need to do
• Brian Krebs (Krebs on Security): Q&A on the reported theft of 1.2B email accounts

2014-08-05

• Paul Ducklin (Naked Security): How to send 5 million spam emails without even noticing
• Nicole Perlroth and David Gelles (NYT): Russian gang amasses over a billion internet passwords | News release by Hold Security | Via

2014-08-04

• John Hawes (Naked Security): Oxford and Cambridge in the race to eliminate passwords

2014-07-31

• Andy Greenberg (Wired Threat Level): Why the security of USB is fundamentally broken

2014-07-26

• Bianca van de Ketterij (FrankWatching): Veilig omgaan met social media - ben jij alert? [infographic]

2014-07-25

• Andy Greenberg (Wired Threat Level): The app I used to break into my neighbor's home | Via

2014-07-21

• IE-Forum.nl: Geen dwangsom als oude webpagina's herleven door hack | Via

Earlier / undated

• Justin Cappos: PolyPasswordHasher - Protecting passwords in the event of a password file disclosure [PDF] | Press release | Via
• CERT-UK: Quarterly report April - Jun 2014 [PDF] | Via
• David Emm, Roman Unuchek, Victor Chebyshev, Maria Garnaeva and Denis Makrushin (Kapersky Lab): IT threat evolution - Q2 2014 [PDF linked from this page] | Full text in PDF | Via
• HP Fortify on Demand: Internet of Things research study [PDF] | Via
• PwC Nederland: Cyber governance onderzoek - Volwassenheid van cyber beheersing binnen Nederlandse organisaties [PDF] | Via
• Rijksoverheid.nl: Onderzoek ter plaatse, inbeslagneming en doorzoeking en onderzoek van gegevensdragers en in geautomatiseerde werken, discussiestuk [link naar PDF op pagina] | Via

[Permalink]