BA e-ticketing system flaw exposes passengers details including phone numbers, email addresses etc
News Authentification
Google Offers UK Users Titan Security Key
Small security key connects via Bluetooth or USB, and is designed to bolster two-factor authentication efforts for consumers
Tech Firms Oppose GCHQ ‘Ghost’ Encryption Proposal
Apple, Google, Microsoft signal opposition to GCHQ proposal to eavesdrop on encrypted messages
Google Admits To Storing Unhashed Passwords
My bad. Google admission after it stored plain text passwords for 14 years on its internal systems
Facebook Allows Two-Factor Authentication Phone Number Search
Another Facebook privacy worry as it emerges that platform links authentication phone number with user profile
Gov.UK Verify Authentication Scheme Slammed by NAO
National Audit Office heavily criticises government authentication scheme, which it says has fallen well below target
Encrypted Apps Used To Exchange Child Abuse Images – Report
Criminals increasingly utilising encrypted apps, rather than the dark web, to trade child abuse images
Fake Wax Hand Cracks Vein Authentication
Biometric bypass sees researchers use fake wax hand to trick vein authentication system
Australia Passes Controversial Encryption Law
The day online privacy died, as Australia passes law to give police, security services access to encrypted messages
Reddit Confirms ‘Serious’ Hack Of User Data
Reddit knew of ‘security incident’ since 19 June but only alerted users more than a month later
Serious Oracle Access Manager Vulnerability Patched
Oracle patches a serious vulnerability that could allow an attacker to impersonate arbitrary users (even admins)
WhatsApp Co-Founder Jan Koum Departs Facebook
WhatsApp co-founder departs Facebook amid reports of clashes over personal data and attempts to weaken its encryption
Identity In the Blockchain Era: How We Get There
Okta’s Frederic Kerrest explains the potential of Blockchain for identity services and the obstacles that must be overcome
Pwn2Own 2018 Expands Targets And Raises Prize Pool To $2M
For first time at Pwn2Own, researchers will take aim at Oracle’s VirtualBox, as well as the open-source Nginx web server in attempts to reveal zero-days
Microsoft, Malwarebytes Spectre Fixes Contrast With Intel’s Efforts
ANALYSIS: Updates from two vendors caused problems this month , but the difference in how they were handled was remarkable
Google Ads Targeted By Cryptomining Malvertising Attack
Google DoubleClick advertising network serves up ads that mine for cryptocurrencies such as Bitcoin
Biometrics Are Increasingly Favoured For Authentication
Fight to protect digital identity sees biometrics, two-factor authentication and password managers increasingly favoured
Facebook Gives Users Greater Privacy Controls Ahead Of GDPR
Facebook to provide new privacy tools and information as ‘largest ever’ team aims to ensure company is complaint with GDPR
IoT Security Is A Concern For Silicon Readers
Nine in ten Silicon readers are worried about IoT security. Do you agree?
Cisco Acquires Skyport As Cyber-Security Investments Continue
ANALYSIS: January continues to be a month of cyber-security startup acquisitions, as Cisco, Facebook, Amazon and Sumo Logic announce new deals.
Intel: Stop Installing Meltdown & Spectre Patches Now
Intel says it is working on new Meltdown and Spectre patches that should solve ongoing problems
Conditions Favorable To Make 2018 A Big Year For Security Buyouts
ANALYSIS: The new year has started off with a flurry of acquisition activity in the cyber-security space that is likely to continue for the rest of the year.
Apple Faces Meltdown & Spectre Class Action Lawsuit
Class action lawsuit alleges that Apple hasn’t done enough to secure its products, which are not fit for purpose as a result
Fake Meltdown & Spectre Websites Target Users With Fake Patches
Meltdown and Spectre patch issues continue with scammers now getting in on the act
Questions Arise About Effectiveness of Meltdown, Spectre Fixes, Advice
ANALYSIS: Confusing array of CPU and OS patches raise the question of whether side effects caused worse thanthreats posed by Meltdown and Spectre
How To Fix Windows Registry Issues That Halt Microsoft Security Updates
ANALYSIS: Microsoft is halting all security updates on Windows systems with badly-behaved antivirus products. But you can fix this problem
ICO Dishes £400,000 Fine To Carphone Warehouse For 2015 Data Breach
ICO investigation finds multiple failings that led to 2015 breach which saw 3m customers and employees data exposed
CES 2018: Intel CEO Promises Meltdown & Spectre Fixes Within A Week
Intel CEO Brian Krzanich tells CES that he is grateful for industry cooperation and will release fixes soon as Apple also posts new patches
How To Protect Your Computers From Spectre, Meltdown Vulnerabilities
ANALYSIS: For some users protecting your systems against Spectre and Meltdown will be straightforward, but for others more complicated
Meltdown & Spectre: Intel Faces Class-Action Lawsuits
Intel faces legal action over industry-wide chip vulnerabilities