HTTPS
More Than Half of Phishing Sites Now Use HTTPS
As Google Chrome and other web browsers further embrace HTTPS in a visual way, it’s becoming a requirement that threat actors use it, too. By the end of Q1 2019, more than ...
FBI issues warning about HTTPS Phishing
“Do not trust a website just because it has a lock icon or “https” in the browser address bar.” On Monday the FBI issued a public warning about the rise... The post ...
A broken SSL certificate will hurt your SEO
Turns out the HTTPS ranking signal matters more than we thought. And broken SSL certificates are now confirmed to hurt SEO. The post A broken SSL certificate will hurt your SEO appeared ...
HTTPS: The Myth of Secure Encrypted Traffic Exposed
The S in HTTPS is supposed to mean that encrypted traffic is secure. For attackers, it just means that they have a larger attack surface from which to launch assaults on the ...
Google Chrome Drops Support for TLS 1.0 and 1.1
The latest stable release of Google Chrome, version 72, has removed support for the aging 1.0 and 1.1 versions of TLS, as well as for the problematic HTTP-based Public Key Pinning protocol ...
Android WebView: Are Secure Coding Practices Being Followed?
WebViews are very common on the Android applications. There are clear WebView security best practices, but are they being implemented? With our previous blog post in mind, Android WebView: Secure Coding Practices, ...
49 Percent of Phishing Sites Now Use HTTPS
Since 2015 there has been a steady increase in threat actors’ use of SSL certificates to add an air of legitimacy to malicious websites. By the end of 2017 almost a third ...
Massive Marriott Data Breach, Secure Holiday Shopping Tips, Phishing Sites Using HTTPS – WB45
This is your Shared Security Weekly Blaze for December 3rd 2018 with your host, Tom Eston. In this week’s episode: the massive Marriott data breach, secure holiday shopping tips, and phishing sites ...
Pros and Cons of DNS Over HTTPS
DNS, also known as Domain Name System, is the internet-wide service that translates fully qualified hostnames (FQDNs) such as www.netsparker.com into an IP address. It was developed because it's much easier to ...
