WoSign knowingly and intentionally mis-issued certificates in order to circumvent browser restrictions and CA requirements.
Planning for the End of 2016: A Leap Second and the End-of-Support for SHA-1 TLS Certificates
A leap second and the final end of browser support for SHA-1 TLS certificates will happen and can potentially break software systems and applications.
MI5 Boss Warns of ‘Aggressive’ Russian Cyber Threat
Andrew Parker claims Kremlin is on the offensive
Google AI Can Create Its Own Encryption
Google Brain has shown that artificial intelligence has the ability to create its own cryptography standard, dynamically.
Flash, Windows Zero-days Are Being Actively Exploited in the Wild
Microsoft hasn’t patched the Windows flaw—a local privilege escalation that can be used as a security sandbox escape.
Fake Palo Alto Cyber-conference Invites Deliver Spy Trojan
The effort is related to ongoing Operation Lotus Blossom attack campaigns in the Asia Pacific region.
National Cyber Security Strategy Aims to Defend, Deter, Develop
Chancellor Philip Hammond has launched the new UK cybersecurity strategy, built on developing future talent, protecting what we have and identifying the malicious few.
Firms Value Threat Intel … But Fail to Use it Properly
Anomali survey finds organizations are suffering from data overload
NHS Trust Suspends Operations After Major Cyber Incident
Patients transferred after IT systems are shut down
Toolsmith – GSE Edition: snapshot.ps1
I just spent a fair bit of time preparing to take the GIAC Security Expert exam as part of the requirement to recertify every four years. I first took the exam in 2012, and I will tell you, for me, one third of the curriculum is a “use it or lose it” s…