Around 1,500 apps for iPhone and iPad contain an HTTPS vulnerability making it ‘trivial’ for hackers to perform man-in-the-middle attacks to steal passwords, bank details and other private information.
The post 1,500 iOS apps open to simple man-in-the-middle attacks appeared first on We Live Security.
Google engineers have spent the last several years moving many of the company’s online services to encrypted links. Gmail is HTTPS by default, and Google search is done over SSL for much of the world. Now the company is working to move its ad-serving and ad-buying platforms to HTTPS, as well. Google’s ad networks are pervasive […]
Pinterest announced this week that it would begin paying cash rewards through its bug bounty program, and said that its move to HTTPS paved the way.
The EFF’s Decentralized SSL Observatory turned up 1,600 certificates that should have been rejected but instead passed browser checks because they were manipulated by Komodia’s SSL Digester interception module.
Cloudflare has deployed a new level of encryption on its service that hardens and speeds up users’ experience, especially when accessing domains via mobile browsers.
Komodia.com, home of the SSL module at the heart of the Superfish scandal, is offline because of a DDoS attack.
Google proposes that browser vendors begin issuing address bar warnings to users that HTTP connections provide no data security protection.
A new coalition, Let’s Encrypt, announced today they will grant free HTTPS certificates to any site that needs one in 2015.