Clever trick allows attackers to obtain valid TLS certificate for hijacked domains.
2018 saw a reduced number of huge DNS-facilitated DDoS attacks. Vendors and service providers believe that malicious impact will drop with continued technology improvements.
ThousandEyes, a firm that provides DNS monitoring, falls prey to its own DNS goof.
Recently, I published a Q&A with Cole Quinn, Senior Program Manager of Corporate Domains, TLDs and DNS at Microsoft, about his new role as President and Chairman of the Brand Registry Group (BRG).
https://www.trustedreviews.com/news/google-chrome-70-security-feature-will-axe-trust-hundreds-critical-websites-3602774
The Payment Card Industry (PCI) council have spoken. Early versions of Transport Layer Security (TLS) and Secure Sockets Layer (SSL) are now being forced into obscurity by the Payment Card Industry Data Security Standard (PCI DSS) 3.2.1, pushed there by years of security failures and a technological horizon in which those failures will simply not be acceptable.
Half of the top one million sites in the world are now using HTTPS, in a boost for global web security, according to a leading researcher.
Edwards Snowden’s revelations about the NSA’s widespread surveillance and pervasive monitoring started a large number of initiatives to advance security and privacy of standards.