Troy Hunt

AUGUST 12, 2021

More than 3 years ago now, Scott Helme and I launched a little project called Why No HTTPS? The top million is defined by Tranco and Scott uses it to produce 2 other lists which drive this little project: The top sites that redirect to HTTPS The top sites that don't redirect to HTTPS These lists don't add up to 1 million.

VPN 360

VPN 360

SecureList

OCTOBER 26, 2023

Unfortunately for us, all the communications with the servers in question happened over HTTPS, so we could not recover any additional details from the traffic. Unfortunately for us, all the communications with the servers in question happened over HTTPS, so we could not recover any additional details from the traffic.

Encryption 144

Encryption Backups VPN Malware 144

SecureList

JUNE 21, 2023

For example, in 2021, analysis of iTunes backups helped to discover an attachment containing the FORCEDENTRY exploit. Over the years, there have been multiple cases when iOS devices were infected with targeted spyware such as Pegasus, Predator, Reign and others. Consequently, the analysts lost “the ability to follow the exploit.”

Spyware 134

Spyware Encryption Passwords Backups 134

SiteLock

OCTOBER 21, 2021

or "Why do we need WAF?" It is the IPS and traffic inspection functions implemented in NGFW that are one of the main causes of confusion and the source of the question: "Why do I need a WAF if I already have an NGFW?" Some information security specialists confuse the concepts of WAF and NGFW. We have an NGFW, do we need a WAF?"

Firewall 52

Firewall Penetration Testing Information Security Banking 52

Fox IT

JUNE 29, 2022

Flubot is an Android based malware that has been distributed in the past 1.5 years in Europe, Asia and Oceania affecting thousands of devices of mostly unsuspecting victims. In this article we detail its development over time and recent developments regarding its disappearance, including new features and distribution campaigns. Never heard of it?

Banking 97

Banking Malware DNS Encryption 97

Troy Hunt

MARCH 31, 2021

That's a link to the last snapshotted version on archive.org because if you go to coinhive.com today, you'll see nothing. If you've landed on this page because you saw a strange message on a completely different website then followed a link to here, drop a note to the site owner and let them know what happened. The website is dead.

Technology 363

Technology Mobile Internet Internet 363

Security Boulevard

APRIL 4, 2022

ACME v2 is the current version of the protocol, published in March 2018. The previous version, ACME v1, was deprecated on June 1st, 2021. On September 15, 2021, the DNS records for acme-v01.api.letsencrypt.org On September 15, 2021, the DNS records for acme-v01.api.letsencrypt.org Why use the ACME protocol?

Encryption 52

Encryption Authentication DNS Risk 52