Nederlands
English
- A third of the Internet is under attack
Millions of network addresses subjected to denial-of-service attacks over two-year period
- Heathrow probe after 'security files found on USB stick
The Sunday Mirror reported that the USB stick had 76 folders with maps, videos and documents, including details of measures used to protect the Queen. A man found it in west London and handed it into the paper, it said. Heathrow said all of its security plans had been reviewed and it was "confident" the airport was secure. "We have also launched an internal investigation to understand how this happened and are taking steps to prevent a similar occurrence in future," it said.
http://www.bbc.com/news/uk-41792995
- How does Facebook protect its data?
http://www.zdnet.com/article/leaked-audio-facebook-security-boss-says-ne...
- How safe is two-factor authentication?
From the article: "What 2FA apps don’t protect you against, however, are database leaks." So that means not only the end-users should be careful .
https://hackaday.com/2017/10/16/inside-two-factor-authentication-apps/
- Gigantic IoT Botnet
Since mid-September, a new IoT botnet has grown to massive proportions. Codenamed IoT_reaper, researchers estimate its current size at nearly two million infected devices.
The full article is here: https://www.bleepingcomputer.com/news/security/a-gigantic-iot-botnet-has...
- Canada's 'super secret spy agency' is releasing a malware-fighting tool to the public
the full source code is here: https://bitbucket.org/cse-assemblyline/
The full article: http://www.cbc.ca/news/technology/cse-canada-cyber-spy-malware-assemblyl...
- Hardcoded seeds are not safe
DUHK (Don't Use Hard-coded Keys) is a vulnerability that affects devices using the ANSI X9.31 Random Number Generator (RNG) in conjunction with a hard-coded seed key. The ANSI X9.31 RNG is an algorithm that until recently was commonly used to generate cryptographic keys that secure VPN connections and web browsing sessions, preventing third parties from reading intercepted communications.