Signal downplays encryption key flaw, fixes it after X drama

July 11, 2024 at 04:53PM Signal is improving its desktop client’s security by changing how it stores plain text encryption keys for the data store. Previously, the keys were stored in a local file, posing a security risk. The company is now implementing Electron’s SafeStorage API to further secure the encryption keys, making it more … Read more

Zyxel warns of multiple critical vulnerabilities in NAS devices

November 30, 2023 at 10:17AM Zyxel has patched critical security vulnerabilities in its NAS devices that risked unauthorized command execution and data compromise. Users of NAS326 and NAS542 models must update their firmware to versions V5.21(AAZF.15)C0 and V5.21(ABAG.12)C0 or later, respectively, as there are no alternative mitigations. **Takeaways from Meeting Notes:** 1. **Issue Identification:** Zyxel … Read more