Safety  List -  2024  2023  2021  2020  2019  2018

DATE

NAME

Info

CATEG.

WEB

26.9.24

Web tracking report: who monitored users’ online activities in 2023–2024 the mostWeb tracking has become a pervasive aspect of our online experience. Whether we’re browsing social media, playing video games, shopping for products, or simply reading news articles, trackers are silently monitoring our online behavior, fueling the ceaseless hum of countless data centers worldwide. In this article,SafetySecurelist

21.9.24

Google Password Manager now automatically syncs your passkeysGoogle announced that starting today, passkeys added to Google Password Manager will automatically sync between Windows, macOS, Linux, Android, and ChromeOS devices for logged-in users.Safety

BleepingComputer

21.9.24

Discord rolls out end-to-end encryption for audio, video callsDiscord has introduced the DAVE protocol, a custom end-to-end encryption (E2EE) protocol designed to protect audio and video calls on the platform from unauthorized interceptions.Safety

BleepingComputer

20.9.24

Chrome switching to NIST-approved ML-KEM quantum encryptionGoogle announced updates in the post-quantum cryptographic key encapsulation mechanism used in the Chrome browser, specifically, the swap of Kyber used in hybrid key exchanges with Module Lattice Key Encapsulation Mechanism (ML-KEM).Safety

BleepingComputer

20.9.24

Chrome Users Can Now Sync Passkeys Across Devices with New Google PIN FeatureGoogle on Thursday unveiled a Password Manager PIN to let Chrome web users sync their passkeys across Windows, macOS, Linux,SafetyThe Hacker News

18.9.24

Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer BrowsingGoogle has announced that it's rolling out a new set of features to its Chrome browser that gives users more control over their data whenSafetyThe Hacker News

17.9.24

Google Chrome Switches to ML-KEM for Post-Quantum Cryptography DefenseGoogle has announced that it will be switching from KYBER to ML-KEM in its Chrome web browser as part of its ongoing efforts toSafetyThe Hacker News

14.9.24

WordPress.org to require 2FA for plugin developers by OctoberStarting October 1st, WordPress.org accounts that can push updates and changes to plugins and themes will be required to activate two-factor authentication (2FA) on their accounts.Safety

BleepingComputer

8.9.24

Criminal IP Earns PCI DSS v4.0 Certification for Top-Level SecurityAI Spera has achieved PCI DSS v4.0 certification for its threat intel search engine solution, Criminal IP. Learn more from the Criminal IP cyber threat intelligence search engine.Safety

BleepingComputer

7.9.24

Admins of MFA bypass service plead guilty to fraudThree men have pleaded guilty to running OTP.Agency, an online platform that provided social engineering help to obtain one-time passcodes from customers of various banks and services in the U.K.Safety

BleepingComputer

13.7.24

Google Advanced Protection Program gets passkeys for high-risk usersGoogle announced today that passkeys are now available for high-risk users when enrolling in the Advanced Protection Program, which provides the strongest level of account securitySafety

BleepingComputer

10.7.24

Google Adds Passkeys to Advanced Protection Program for High-Risk UsersGoogle on Wednesday announced that it's making available passkeys for high-risk users to enroll in its Advanced ProtectionSafety

The Hacker News

5.7.24

Hackers abused API to verify millions of Authy MFA phone numbersTwilio has confirmed that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to SMS phishing and SIM swapping attacks.Safety

BleepingComputer

23.5.24

Zoom adds post-quantum end-to-end encryption to video meetingsZoom has announced the global availability of post-quantum end-to-end encryption (E2EE) for Zoom Meetings, with Zoom Phone and Zoom Rooms to follow soon.Safety

BleepingComputer

22.5.24

Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for MeetingsPopular enterprise services provider Zoom has announced the rollout of post-quantum end-to-end encryption (E2EE) for ZoomSafetyThe Hacker News

19.5.24

Microsoft to start enforcing Azure multi-factor authentication in JulyStarting in July, Microsoft will begin gradually enforcing multi-factor authentication (MFA) for all users signing into Azure to administer resources.Safety

BleepingComputer

14.5.24

MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded DevicesThe MITRE Corporation has officially made available a new threat-modeling framework called EMB3D for makers of embeddedSafetyThe Hacker News
7.5.24Google Simplifies 2-Factor Authentication Setup (It's More Important Than Ever)Google on Monday announced that it's simplifying the process of enabling two-factor authentication (2FA) for users with personalSafetyThe Hacker News
6.5.24Bitwarden launches new MFA Authenticator app for iOS, AndroidBitwarden, the creator of the popular open-source password manager, has just launched a new authenticator app called Bitwarden Authenticator, which is available for iOS and Android devices.Safety

BleepingComputer

13.4.24DuckDuckGo launches a premium Privacy Pro VPN serviceDuckDuckGo has launched a new paid-for 3-in-1 subscription service called 'Privacy Pro,' which includes a virtual private network (VPN), a personal data removal service, and an identity theft restoration solution.Safety

BleepingComputer

9.4.24Google Chrome Adds V8 Sandbox - A New Defense Against Browser AttacksGoogle has announced support for what's called a V8 Sandbox in the Chrome web browser in an effort to address memory corruptionSafetyThe Hacker News
4.4.24New Chrome feature aims to stop hackers from using stolen cookiesGoogle announced a new Chrome security feature called 'Device Bound Session Credentials' that ties cookies to a specific device, blocking hackers from stealing and using them to hijack users' accounts.Safety

BleepingComputer

3.4.24Google Chrome Beta Tests New DBSC Protection Against Cookie-Stealing AttacksGoogle on Tuesday said it's piloting a new feature in Chrome called Device Bound Session Credentials ( DBSC ) to help protect usersSafetyThe Hacker News
21.3.24Microsoft announces deprecation of 1024-bit RSA keys in WindowsMicrosoft has announced that RSA keys shorter than 2048 bits will soon be deprecated in Windows Transport Layer Security (TLS) to provide increased security.Safety

BleepingComputer

16.3.24Google Chrome gets real-time phishing protection later this monthGoogle will roll out a Safe Browsing update later this month that will provide real-time malware and phishing protection to all Chrome users, without compromising their browsing privacy.Safety

BleepingComputer

31.1.24

Brave to end 'Strict' fingerprinting protection as it breaks websitesBrave Software has announced plans to deprecate the 'Strict' fingerprinting protection mode in its privacy-focused Brave Browser because it causes many sites to function incorrectly.Safety

BleepingComputer