Encryption

IT bosses are confident they’ve found the certificates they don’t know about

IT bosses are confident they’ve found the certificates they don’t know about 2026-10-29 at 08:00 By Mirko Zorz Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because automated systems are already in place. Their more specific answers point elsewhere. […]

IT bosses are confident they’ve found the certificates they don’t know about Read More »

NIST starts the countdown to retire quantum-vulnerable encryption

NIST starts the countdown to retire quantum-vulnerable encryption 2026-10-28 at 07:30 By Anamarija Pogorelec The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains which cryptographic methods need […]

NIST starts the countdown to retire quantum-vulnerable encryption Read More »

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken 2026-10-26 at 01:33 By Anamarija Pogorelec The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. DTLS is the variant of TLS built for datagram transports such as UDP, and version […]

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken Read More »

Privacy-preserving AI can protect your heart data, the bill is the problem

Privacy-preserving AI can protect your heart data, the bill is the problem 2026-10-21 at 10:02 By Mirko Zorz A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model fit on a sticky note. Cardiac care […]

Privacy-preserving AI can protect your heart data, the bill is the problem Read More »

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 2026-10-12 at 10:23 By Sinisa Markovic Websites that rely on Let’s Encrypt will soon have to renew their TLS certificates more often. Starting February 10, 2027, the certificate authority will issue certificates valid for 64 days by default, down from […]

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 Read More »

PCI SSC calls for human approval of AI agent actions involving cardholder data

PCI SSC calls for human approval of AI agent actions involving cardholder data 2026-10-09 at 08:00 By Anamarija Pogorelec The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. Developed with industry stakeholders, […]

PCI SSC calls for human approval of AI agent actions involving cardholder data Read More »

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing 2026-10-07 at 08:12 By Sinisa Markovic The OpenSSH team released version 10.6 on Oct. 6 and said it will ship releases more often for now to get bugfixes into users’ hands more quickly. The maintainers have received a large number of security reports, […]

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing Read More »

Signal brings encrypted local backups to iOS and desktop, adds cross-platform restore

Signal brings encrypted local backups to iOS and desktop, adds cross-platform restore 2026-09-30 at 12:31 By Sinisa Markovic Signal users who switch from an Android phone to an iPhone, or the other way around, can take their message history with them, and backups can be restored on Android, iOS, Linux, macOS and Windows. The option […]

Signal brings encrypted local backups to iOS and desktop, adds cross-platform restore Read More »

OpenSSL’s new alpha build speeds up post-quantum crypto

OpenSSL’s new alpha build speeds up post-quantum crypto 2026-09-10 at 01:15 By Sinisa Markovic The OpenSSL project released the first alpha of OpenSSL 4.1.0, giving developers an early look at a version built for encrypted communication over unreliable connections and faster post-quantum cryptography. This marks the opening test build for a version still months from […]

OpenSSL’s new alpha build speeds up post-quantum crypto Read More »

What your vendor says about PQC tells you if they are ready

What your vendor says about PQC tells you if they are ready 2026-09-01 at 07:30 By Mirko Zorz In this interview with Help Net Security, Dr. Yaakov Stein, VP CTO of Allot, discusses what post-quantum readiness looks like inside a mobile network. The discussion covers which operator traffic stays sensitive for years, including subscriber identity […]

What your vendor says about PQC tells you if they are ready Read More »

Nearly half of enterprises have no one leading PQC migration

Nearly half of enterprises have no one leading PQC migration 2026-08-21 at 07:30 By Anamarija Pogorelec Enterprises believe they are prepared for the security challenges posed by quantum computing, but gaps in ownership, testing and visibility could complicate their transition to post-quantum cryptography (PQC), according to new research from Axiad. Who owns PQC migration? (Source: […]

Nearly half of enterprises have no one leading PQC migration Read More »

Signal’s new security feature checks if your encrypted chats were tampered with

Signal’s new security feature checks if your encrypted chats were tampered with 2026-08-12 at 16:47 By Sinisa Markovic Signal has introduced a feature called automatic key verification, giving users a new way to confirm that nobody has secretly interfered with their encrypted chats. “Signal is always end-to-end encrypted, and automatic key verification provides an additional, […]

Signal’s new security feature checks if your encrypted chats were tampered with Read More »

Nobody was checking the drives that encrypt your laptop

Nobody was checking the drives that encrypt your laptop 2026-07-21 at 08:30 By Anamarija Pogorelec A drive ships with a label promising hardware encryption. You plug it in, set a password, and trust the chip inside to handle the rest. Millions of laptops and workstations run this way, on solid-state drives built to the TCG […]

Nobody was checking the drives that encrypt your laptop Read More »

Ransom demands are down, email is the top way attackers get in

Ransom demands are down, email is the top way attackers get in 2026-07-16 at 08:00 By Mirko Zorz An employee opens an email that looks like any other, clicks a link, and gives up a password without noticing. A stolen login opens a door deeper in the network. Files stop opening a few days later. […]

Ransom demands are down, email is the top way attackers get in Read More »

Chatto: Open-source team messenger with privacy at its core

Chatto: Open-source team messenger with privacy at its core 2026-07-14 at 07:30 By Anamarija Pogorelec Teams that want their group chats off commercial platforms have a growing menu of self-hosted options. Chatto joined that group when its developer released the code under an open-source license and posted binaries for anyone to run on their own […]

Chatto: Open-source team messenger with privacy at its core Read More »

OpenSSH 10.4 arrives with security fixes and a post-quantum signature option

OpenSSH 10.4 arrives with security fixes and a post-quantum signature option 2026-07-06 at 16:05 By Anamarija Pogorelec Operators who manage remote access to Unix and Linux systems keep a close watch on OpenSSH, the software that carries most SSH traffic across the internet. The project released version 10.4 with eight security fixes, a set of […]

OpenSSH 10.4 arrives with security fixes and a post-quantum signature option Read More »

This supercomputer encrypts your data even while it’s running it

This supercomputer encrypts your data even while it’s running it 2026-07-01 at 08:30 By Sinisa Markovic Most people who handle sensitive data already encrypt it in two places. They lock it down when it sits on a hard drive, and they lock it down when it moves across a network. There has always been a […]

This supercomputer encrypts your data even while it’s running it Read More »

Encrypted DNS still tells an eavesdropper where to look

Encrypted DNS still tells an eavesdropper where to look 2026-06-22 at 08:00 By Mirko Zorz Encrypted DNS runs across much of the Internet. DNS over TLS, HTTPS, and QUIC keep the contents of a query away from anyone watching a network link. The encryption covers the message inside each packet. The packet still carries plaintext […]

Encrypted DNS still tells an eavesdropper where to look Read More »

Your browser tab could become encrypted storage for someone else’s files

Your browser tab could become encrypted storage for someone else’s files 2026-06-19 at 08:30 By Mirko Zorz Decentralized storage networks already hand pieces of people’s data to strangers’ machines. The lasting question across these networks is whether the machine holding the data can read it. A research paper by Gregory Magarshak, a professor at IENYC, […]

Your browser tab could become encrypted storage for someone else’s files Read More »

Cybercriminals are moving away from mass phishing campaigns

Cybercriminals are moving away from mass phishing campaigns 2026-06-12 at 13:47 By Sinisa Markovic Phishing activity declined by roughly 20% in both 2024 and 2025, according to research from Zscaler’s ThreatLabz team. The drop followed years of growth that pushed phishing activity above 2 billion hits in 2023. “Phishing volume measured by blocked emails is […]

Cybercriminals are moving away from mass phishing campaigns Read More »

Scroll to Top