HTTP Strict Transport Security becomes Internet standard

Friday, November 23rd, 2012

A Web security policy mechanism that promises to make HTTPS-enabled websites more resilient to various types of attacks has been approved and released as an Internet standard -- but despite support from some high-profile websites, adoption elsewhere is still low. HTTP Strict Transport Security (HSTS) allows websites to declare themselves accessible ...

Unpatched Microsoft security vulnerability being actively exploited

Tuesday, June 19th, 2012

An unpatched critical security vulnerability in Microsoft's software, which means that users' computers can become infected simply by visiting a website with Internet Explorer, is being actively exploited by cybercriminals. Alongside last week's regular Patch Tuesday announcement (including a remote code execution vulnerability that is being exploited by attackers ...

HTTPS Everywhere is now available for Google Chrome

Wednesday, February 29th, 2012

HTTPS Everywhere is a produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For instance, they may default to unencrypted HTTP, or fill encrypted pages with links ...

Chrome virus scanner coming

Sunday, January 8th, 2012

Google has released a beta version of its Chrome 17 browser that scans for malicious downloads, which may help tackle scareware threats. The browser will issue a warning to discard a file when a user attempts to download a known bad file or if the file comes from a ...

Google+ Gets a “+1″ for Browser Security

Sunday, August 21st, 2011

Launching a new Web app today comes with a few certainties, and one of them is, “I will be a target for hackers” for sure.  So when an app as large and as high profile as Google+ launches, it will surely be one of the top targets for malicious activity.  ...