Mozilla is going ahead with its plans to enable DNS-over-HTTPS (DoH) by default in its Firefox browser. The roll-out will start with a small cohort of users in the U.S. – and barring any problems with deployment, it looks set to be extended gradually to
New research from Sophos suggests that two thirds of organisations were hit by a cyberattack last year. The report lists the three biggest reasons why organisations are still struggling to reduce their risk: Attacks are coming in from multiple
It has been a long time coming, but Google has finally introduced a simple setting for automatic deletion of certain key categories of your activity data. The new auto-delete function applies to Location History and Web & App Activity data. Enabling it
iOS 13 (still in beta) introduces a welcome element of transparency concerning location data and permissions. When an app has been accessing your location in the background, Apple will send you a periodic alert in the form of a map detailing all the places
For fans of Chrome who prefer an ad-free browsing experience, recent announcements from Google are unlikely to go down well. Google has quietly confirmed that it’s going ahead with a controversial change to its rules for Chrome browser extensions. Unless
Has the time for another major Android refresh come around already? Well, not quite. Android Q isn’t scheduled for general consumer release until early Autumn. But last month, Google launched its developer-focused preview version (Android Q Beta), which was
Tread carefully when it comes to Android security products – and never take an app provider’s claims at face value. In light of recent research showing that the majority of antivirus apps are pretty much useless, these messages are more relevant than
It’s the Holy Grail for any money-minded hacker: the discovery of a previously undetected flaw in a major software system, giving you the opportunity to cash in on your find for a tidy reward. Exploit vendor, Zerodium has just hiked its bounties for
A VPN routes your Internet traffic through a remote server, encrypting your data and hiding your IP address. If you value your security and privacy when accessing the web, a VPN, or Virtual Private Network is pretty much a must-have tool. Most users access
Worried about what that “.exe.” file is going to do to your Windows-based system? Here’s some good news. Microsoft has now officially announced the arrival of Windows Sandbox: an isolated desktop testing environment for running untrusted software. Built into
Where will this year’s big cyber security storm come from? What issues are currently keeping information security managers awake at night? December and January is the time when commentators, software vendors and industry insiders tell us what they think is
When it comes to password hygiene, many of us are still ignoring the basics. Password management specialist, SplashData has released its eighth ‘Worst Passwords of the Year’ list: a roundup of the most commonly used and easily guessable passwords. The list
The value of encryption is hard to overestimate. When it works, it means that even if your data is accessed without authorisation, it cannot be read (and by extension, cannot be exploited) by the attacker; something that makes encryption an essential layer of
Antivirus (AV) is a commonly relied upon security control. But it’s worth remembering that there’s nothing inherently “hack-proof” about this type of software. After all, no program (AV included) is immune to outside attack! That said, if you can run your
If a direct attack on a particular network isn’t viable, then what’s the hacker’s next move? In many instances, it’s a case of going upstream: i.e. identifying an application trusted by the target – and using that software as a backdoor means of malware
It’s versatile, it works on a minimum of code - and it’s also relatively easy to put to work: three factors which go a long way in explaining why Python is currently being touted as the “world’s most popular coding language”. Black hat hackers are drawn to
We’ve been reminded that when it comes to malware delivery, threat actors tend to prefer tried and tested methods. A recent roundup from Cofense Intelligence included a breakdown of malware loaders analysed by volume for the month of August 2018. It found
A business merger or restructure can leave existing Internet domains suddenly surplus to requirements. So what’s the harm in simply allowing them to expire? Recent research highlights the perils of letting old domains slip out of your control… Domain