Strengthening 2-Step Verification with Security Key

Tuesday, October 21st, 2014

2-Step Verification offers a strong extra layer of protection for Google Accounts. Once enabled, you’re asked for a verification code from your phone in addition to your password, to prove that it’s really you signing in from an unfamiliar device. Hackers usually work from afar, so this second factor makes ...

Banks: Credit Card Breach at Staples Stores

Monday, October 20th, 2014

Multiple banks say they have identified a pattern of credit and debit card fraud suggesting that several Staples Inc. office supply locations in the Northeastern United States are currently dealing with a data breach. Staples says it is investigating “a potential issue” and has contacted law enforcement. According to more than a half-dozen sources at banks operating on ...

This POODLE bites: exploiting the SSL 3.0 fallback

Tuesday, October 14th, 2014

Today we are publishing details of a vulnerability in the design of SSL version 3.0. This vulnerability allows the plaintext of secure connections to be calculated by a network attacker. I discovered this issue in collaboration with Thai Duong and Krzysztof Kotowicz (also Googlers). SSL 3.0 is nearly 15 years old, ...

Dropbox has been hacked, change your password immediately

Monday, October 13th, 2014

If you use Dropbox, you need to change your password immediately as it looks like there has been a breach in the security. In a posting on Pastebin, which will not link to as it contains account data, the user claims to have nearly 7 million account user names and ...

The malware of the future may come bearing real gifts

Sunday, October 12th, 2014

“What,” asked the speaker. “if Notepad behaved just like you would expect it to, but only for the first hour or so that you used it? What if it began to do different things after that?” According to Giovanni Vigna, a professor at the University of California, Santa Barbara, and the ...