Domain name registrar and web hosting provider Epik has been hacked and a very large amount of data is now "in the wild". At this juncture it's unclear exactly how much data is involved, but indications would suggest that the breach was extensive and included not only customer details, but also credit card data. While any hack is serious and a data breach is always a … [Read more...] about Epik Hack Exposes Data of Millions of Non-Customers
security
All US Government Websites to Start Using HTTPS
From September 1st this year all US government websites that use the .gov top level domain name will be obliged to use SSL and be available over HTTPS only. Eventually they plan to add the .gov zone to the HSTS which would make it technically obligatory to have an SSL in order for a site to load in any modern browser. When an entire domain extension is added to the HSTS … [Read more...] about All US Government Websites to Start Using HTTPS
How to Spot a Corona Virus / COVID 19 Phish
Unfortunately cyber crime has not stopped during the global COVID-19 crisis. If anything there's probably been an increase in certain types of malicious activity. EuroPol and other agencies have been sharing tips and resources to help individuals and businesses address security, which with so many employees now being forced to work from home, has become a much bigger issue … [Read more...] about How to Spot a Corona Virus / COVID 19 Phish
Afilias to Offer Registry Lock for 28 Domain Extensions
Afilias has announced that they'll start offering a "registry lock" service for all 28 owned or operated TLDs on the Afilias registry system. "Registry Lock" is a service that appeals primarily to bigger brands, governments, high profile websites or financial institutions. With a registry lock applied it makes it incredibly difficult for a domain to be hijacked, its DNS … [Read more...] about Afilias to Offer Registry Lock for 28 Domain Extensions
Apple vs FBI: Apple and Others To Argue On The Hill
Tomorrow afternoon at 1pm EST Apple will be giving testimony to the House Judiciary Committee. The session that Apple and others will be taking part in is aptly named: The Encryption Tightrope: Balancing Americans’ Security and Privacy In common with other hearings the various witnesses called to speak have already submitted their written testimony, so we can already look at … [Read more...] about Apple vs FBI: Apple and Others To Argue On The Hill
FBI vs Apple: A Bit Of Light Reading
Encryption is key to commerce online. Anything that weakens it is a threat to the digital economy, so the FBI vs Apple case is something that a lot of people are watching very closely. I posted about the case on my company's blog the other day and the case and its implications have been covered widely in the media. The most recent development is that Apple has filed … [Read more...] about FBI vs Apple: A Bit Of Light Reading
APWG Publish Global Phishing Survey H2 2014
The APWG is meeting this week in Barcelona. The event, which is being attended by security professionals, researchers, law enforcement and others will be hearing this afternoon about the APWG's Global Phishing Survey for the second half of 2014. The report (PDF) was produced by Greg Aaron and Rod Rasmussen is well worth reading if you want to get an idea of some of the … [Read more...] about APWG Publish Global Phishing Survey H2 2014
APWG Phishing Report Reveals Crimeware Increase
The APWG (Anti-Phishing Working Group) has released their report for Q4 of 2014. It makes for fairly depressing ready, as you'd expect, but it's worth taking the time to have a look over it. So which TLDs are most (ab)used in phishing and malware attacks? It's hardly surprising that .com is the most (ab)used (46%) - it's also the most popular domain extension. What is a … [Read more...] about APWG Phishing Report Reveals Crimeware Increase
ICANN’s SSAC Explained (sort of)
One of ICANN's core missions is maintaining "security and stability" and a key way that this happens is via the work of the SSAC. SSAC = the Security and Stability Advisory Committee. Unless you're a bit of an ICANN "insider" however, you may not be familiar with how they work or what they do, so this new video is helpful: http://youtu.be/dlnPWlJM_1U … [Read more...] about ICANN’s SSAC Explained (sort of)
DNS Belgium To Offer Registry Lock
DNS Belgium, the operator of both the .be ccTLD as well as .brussels and .vlaanderen, has announced the upcoming launch of "Domain Guard". The new service, which is comparable to other registries' "registry lock" service, will be available from mid-November. The service, which will be offered via .be registrars, will offer registrants the ability to "secure all details of … [Read more...] about DNS Belgium To Offer Registry Lock