OVHcloud blames record-breaking DDoS attack on MikroTik botnet

July 3, 2024 at 02:07PM OVHcloud, a major European cloud services provider, successfully mitigated a record-breaking DDoS attack earlier this year, reaching 840 Mpps and stemming from compromised MikroTik network devices. The company has observed a trend of escalating attack sizes and frequency. The high processing power of MikroTik devices poses a significant threat, with … Read more

Google to Block Entrust Certificates in Chrome Starting November 2024

June 29, 2024 at 11:45AM Google has announced it will block websites using certificates from Entrust in Chrome browser from November 1, 2024 due to compliance and security issues. TLS certificates from Entrust will not be trusted by Chrome versions 127 and higher. Users will see a warning for insecure connections, urging website operators to … Read more

CISO Corner: The NYSE & the SEC; Ransomware Negotiation Tips

June 28, 2024 at 04:15PM Wireless providers prioritize uptime and lag time at the expense of security, leaving users vulnerable to attacks. At Black Hat 2024, Penn State researchers will reveal how hackers can exploit 5G to intercept Internet traffic, leading to spying and phishing. The researchers have reported vulnerabilities to 5G vendors, but a … Read more

Google cuts ties with Entrust in Chrome over trust issues

June 28, 2024 at 10:36AM Google is ending its trust in Entrust due to a history of compliance and general improvement failures. From November 1 in Chrome 127, TLS server authentication certificates using Entrust or AffirmTrust roots won’t be trusted by default. This may require website owners to choose a new CA owner to avoid … Read more

Tor Browser 13.5 brings Android enhancements, better bridge management

June 21, 2024 at 10:30AM Tor Browser 13.5 has been released, focusing on usability enhancements for Android and desktop versions. The updates include improved bridge management, redesigned letterboxing, and simplified onion site error messages for desktop. For Android, the release introduces a new connection experience and relocates Tor logs, aiming to bridge the feature gap … Read more

DNSFilter Welcomes Cisco Veteran TK Keanini As CTO

June 11, 2024 at 05:39PM DNSFilter announced the appointment of TK Keanini as Chief Technology Officer (CTO). Keanini, with over 30 years of network security experience, will lead product management, customer experience, engineering, and security intelligence. His focus is on customer needs and feedback to drive ongoing innovation and growth. DNSFilter aims to enhance security … Read more

FCC Proposes BGP Security Reporting for Broadband Providers

June 7, 2024 at 08:12AM The FCC announced new reporting requirements to improve internet routing security, focusing on mitigating flaws in the Border Gateway Protocol (BGP). They propose the largest broadband providers submit quarterly reports on progress. The agency highlights the potential threats of BGP manipulation and proposes implementing security measures using RPKI. Public comments … Read more

Multi-day DDoS storm batters Internet Archive

May 29, 2024 at 04:24PM The Internet Archive is facing a sustained DDoS attack, causing spotty online library access. While its collections are safe, the attacker’s identity remains unknown. Founder Brewster Kahle also highlights legal battles with major publishers and record labels, posing a significant threat to the nonprofit’s future. The Archive is fighting back … Read more

Vast Network of Fake Web Shops Defrauds 850,000 & Counting

May 9, 2024 at 12:49PM A criminal network known as BogusBazaar, based in China, has scammed more than 850,000 victims through over 75,000 fraudulent web shops. They steal payment card details and offer fake merchandise. They operate with an infrastructure-as-a-service model and use expired domains with high Google ratings to attract victims, mostly from the … Read more

Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think

April 6, 2024 at 08:36AM A recent legal settlement highlighted concerns over Google Chrome’s Incognito mode, aiming to improve user privacy. Using private browsing mode gives a fresh start, erasing browsing history and cookies. However, it doesn’t hide IP address, prevent ISP logging, or fully protect against tracking. VPNs and privacy-focused search engines offer additional … Read more